BaselineWatch
Desk

9.3 Business and Functional Requirements

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 9 Migration Strategy part of 9

Title changed

Before · SP 800-116

Business and Functional Requirements

After · SP 800-116 Rev. 1

Business and Functional Requirements

Control changed

Before · SP 800-116

Each agency has a unique operational environment. Agencies vary in size, organizational structure, and geographic topography. Moreover, their PACS requirements are driven by their mission and by risk and vulnerability assessment. The result is today’s PACS environment, which is site-specific and hardly interoperable with other agency implementations. HSPD-12 adds two requirements to these implementations, namely enhanced security and government-wide use of common identification. In other words, an identity credential issued by agency A must be usable by agency B. Note that HSPD-12 leaves the authorization decision to individual agencies. Section 6 provides characteristics of a future PIV-enabled PACS system that substantiates the goals of HSPD-12. Agencies are encouraged to use these characteristics to determine business and functional requirements applicable to their environment.

After · SP 800-116 Rev. 1

Each agency has a unique operational environment. Agencies vary in size, organizational structure, and geographic topography. Moreover, their PACS requirements are driven by their mission and by risk and vulnerability assessment. The result is today’s PACS environment, which is site-specific and hardly interoperable with other agency implementations. HSPD-12 adds two requirements to these implementations, namely enhanced security and government-wide use of common identification. In other words, an identity credential issued by agency A must be usable by agency B. Note that HSPD-12 leaves the authorization decision to individual agencies. Section 6 provides characteristics of a future PIV-enabled PACS system that substantiates the goals of HSPD-12. Agencies are encouraged to use these characteristics to determine business and functional requirements applicable to their environment.