5 Digital Identity Risk Management
All changes in this version
Title changed
Before · SP 800-63-3
Digital Identity Risk Management
After · SP 800-63-4
Digital Identity Risk Management
Control changed
Before · SP 800-63-3
This section is normative.
This section and the corresponding risk assessment guidance supplement the NIST Risk Management Framework [ NIST RMF ] and its component special publications. This does not establish additional risk management processes for agencies. Rather, requirements contained herein provide specific guidance related to digital identity risk that agency RPs SHALL apply while executing all relevant RMF lifecycle phases.
After · SP 800-63-4
This section is normative.
This section and the corresponding risk assessment guidance supplement the NIST Risk Management Framework [ NIST RMF ] and its component special publications. This does not establish additional risk management processes for agencies. Rather, requirements contained herein provide specific guidance related to digital identity risk that agency RPs SHALL apply while executing all relevant RMF lifecycle phases.