`Appendix A` REFERENCES

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version

removed Appendix A REFERENCES

Title changed

Before · SP 800-79-1

REFERENCES

After · SP 800-79-2

~~REFERENCES~~

Control changed

Before · SP 800-79-1

S. 3418 [5 U.S.C. § 552A through Public Law 93-579], 93 rd U.S. Cong., 2d Sess., The Privacy Act of 1974 , December 31, 1974 (effective September 27, 1975). (Available at http://www.archives.gov/research_room/foia_reading_room/privacy_act/privacy_act.html .)

H.R. 2458, Title III [Public Law 107-347], 107 th U.S. Cong., 2d Sess., Federal Information Security Management Act of 2002 , December 17, 2002. (Available at http://frwebgate.access.gpo.gov/cgi- bin/getdoc.cgi?dbname=107_cong_public_laws&docid=f:publ347.107.pdf .)

Committee for National Security Systems, Instruction 4009, National Information Assurance Glossary , Revised May 2003. (Available at http://staff.washington.edu/dittrich/center/4009.pdf .)

Executive Office of the President, Executive Order 10450, Security Requirements for Government Employees , April 17, 1953. (Available at http://www.archives.gov/federal-register/codification/executive-order/10450.html .)

Executive Office of the President, Homeland Security Presidential Directive 12, Policy for a Common Identification Standard for Federal Employees and Contractors, August 27, 2004. (Available at http://www.whitehouse.gov/news/releases/2004/08/20040827-8.html .)

Federal Identity Credentialing Committee, Federal Identity Management Handbook , Version 0.1, December 2005. (Available at http://www.cio.gov/ficc/documents/FederalIdentityManagementHandbook.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Draft Federal Information Processing Standards Publication 140-3, Security Requirements for Cryptographic Modules , July 2007. (Available at http://csrc.nist.gov/publications/PubsDrafts.html#FIPS-140-3 .)

United States Department of Commerce, National Institute of Standards and Technology, Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems , February 2004. (Available at http://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Federal Information Processing Standards Publication 200, Security Controls for Federal Information Systems , March 2006. (Available at http://csrc.nist.gov/publications/fips/fips200/FIPS-200-final-march.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Federal Information Processing Standards Publication 201-1, Personal Identity Verification of Federal Employees and Contractors , March 2006. (Available at http://csrc.nist.gov/publications/fips/fips201-1/FIPS-201-1-chng1.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 37, Guide for the Security Certification and Accreditation of Federal Information Systems , Version 2.0, May 2004. (Available at http:/csrc.nist.gov/publications/nistpubs/800-37/SP800-37-final.pdf .) United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 53 Rev. 1, Recommended Security Controls for Federal Information Systems , December 2006. (Available at http://csrc.nist.gov/publications/nistpubs/800-53-Rev1/800-53-rev1-final-clean-sz.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 59, Guideline for Identifying an Information System as a National Security System , August 2003. (Available at http://csrc.nist.gov/publications/nistpubs/800-59/SP800-59.pdf . )

United States Department of Commerce, National Institute of Standards and Technology, Draft Special Publication 800-73-2, Interfaces for Personal Identity Verification , October 2007. (Available at http://csrc.nist.gov/publications/PubsDrafts.html#SP-800-73--2 .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 76-1, Biometric Data Specification for Personal Identity Verification , January 2007. (Available at http://csrc.nist.gov/publications/nistpubs/800-76-1/SP800-76-1_012407.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 78-1, Cryptographic Algorithms and Key Sizes for Personal Identity Verification , August 2007. (Available at http://csrc.nist.gov/publications/nistpubs/800-78-1/SP-800-78-1_final2.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 85A, PIV Card Application and Middleware Interface Test Guidelines (SP 800-73 Compliance) , April 2006. (Available at http://csrc.nist.gov/publications/nistpubs/800-85A/SP800-85A.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 85B, PIV Data Model Test Guidelines , July 2006. (Available at http://csrc.nist.gov/publications/nistpubs/800-85B/SP800-85b-072406-final.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Special Publication 800- 104, A Scheme for PIV Visual Card Topography , June 2007. (Available at http://csrc.nist.gov/publications/nistpubs/800-104/SP800-104-June29_2007-final.pdf .)

United States Department of Commerce, National Institute of Standards and Technology, Draft Interagency Report 7328, Security Assessment Provider Requirements and Customer Responsibilities: Building a Security Assessment Credentialing Program for Federal Information Systems , September 2007. (Available at http://csrc.nist.gov/publications/PubsDrafts.html#NIST-IR-7328 .)

United States Office of Management and Budget, Circular No. A-130 Revised , Appendix III, Security of Federal Automated Information Resources, February 1996. (Available at http://www.whitehouse.gov/omb/circulars/a130/a130appendix_iii.html .)