BaselineWatch
Desk

7.6 Lost PIV Card or Suspicion of Fraudulent Use

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 7 PIV Authentication Mechanisms part of 7

Title changed

Before · SP 800-116

Lost PIV Card or Suspicion of Fraudulent Use

After · SP 800-116 Rev. 1

Lost PIV Card or Suspicion of Fraudulent Use

Control changed

Before · SP 800-116

If a lost PIV Card is found by a person other than the cardholder, or if a pattern of PIV Card activity raises suspicions of fraudulent use, the security office of the issuing agency, or of the cardholder’s duty station, should be notified. The security office (issuing and local duty station) will determine if further investigation is warranted and if the PCI should be asked to terminate the

11 If a data object is not used in the authentication mechanism being performed, path validation need not be performed on the data object’s digital signature for the authentication result to be fully trusted. PIV Card. In the event of PIV Card termination, the PCI will request the Certification Authority to revoke certificates on the PIV Card.

After · SP 800-116 Rev. 1

If a lost PIV Card is found by a person other than the cardholder, or if a pattern of PIV Card activity raises suspicions of fraudulent use, the security office of the issuing agency, or of the cardholder’s duty station, should be notified. The security office (issuing and local duty station) will determine if further investigation is warranted and if the PCI should be asked to terminate the

11 If a data object is not used in the authentication mechanism being performed, path validation need not be performed on the data object’s digital signature for the authentication result to be fully trusted. PIV Card. In the event of PIV Card termination, the PCI will request the Certification Authority to revoke certificates on the PIV Card.