BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.3 Select Initial Assurance Levels and Baseline Controls

NIST PIV and digital identity SP 800-63-4 against SP 800-63-3
All changes in this version
added 3 Digital Identity Risk Management part of 3

Title changed

Before · SP 800-63-3

After · SP 800-63-4

Select Initial Assurance Levels and Baseline Controls

Control changed

Before · SP 800-63-3

After · SP 800-63-4

The effective impact level (i.e., Low, Moderate, or High) serves as a primary input to the process of selecting the initial assurance level for each user group (see Sec. 3.3.1 ) to identify the corresponding set of baseline digital identity controls from the requirements and guidelines in the companion volumes [SP800-63A] , [SP800-63B] , and [SP800-63C] . The resulting initial assurance level for each user group applies to all three digital identity system functions (i.e., identity proofing, authentication, and federation).

The initial set of selected digital identity controls and processes will be assessed and tailored in Step 4 based on potential risks generated by the identity management system.