7.6 Lost PIV Card or Suspicion of Fraudulent Use
All changes in this version
Title changed
Before · SP 800-116
Lost PIV Card or Suspicion of Fraudulent Use
After · SP 800-116 Rev. 1
Lost PIV Card or Suspicion of Fraudulent Use
Control changed
Before · SP 800-116
If a lost PIV Card is found by a person other than the cardholder, or if a pattern of PIV Card activity raises suspicions of fraudulent use, the security office of the issuing agency, or of the cardholder’s duty station, should be notified. The security office (issuing and local duty station) will determine if further investigation is warranted and if the PCI should be asked to terminate the
11 If a data object is not used in the authentication mechanism being performed, path validation need not be performed on the data object’s digital signature for the authentication result to be fully trusted. PIV Card. In the event of PIV Card termination, the PCI will request the Certification Authority to revoke certificates on the PIV Card.
After · SP 800-116 Rev. 1
If a lost PIV Card is found by a person other than the cardholder, or if a pattern of PIV Card activity raises suspicions of fraudulent use, the security office of the issuing agency, or of the cardholder’s duty station, should be notified. The security office (issuing and local duty station) will determine if further investigation is warranted and if the PCI should be asked to terminate the
11 If a data object is not used in the authentication mechanism being performed, path validation need not be performed on the data object’s digital signature for the authentication result to be fully trusted. PIV Card. In the event of PIV Card termination, the PCI will request the Certification Authority to revoke certificates on the PIV Card.