BaselineWatch
25 requirements
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

NIST PIV and digital identity SP 800-63A

25 requirements · published 2020-03-02
Changes in this version
All1 The CSP SHALL NOT use KBV to verify an applicant's identity against more than one10 References2 The CSP SHALL only use information that is expected to be known only to the applicant3 The CSP SHALL allow a resolved and validated identity to opt out of KBV and leverage4 The CSP SHOULD perform KBV by verifying knowledge of recent transactional history5 The CSP SHALL require operators to have undergone a training program to detect6 The CSP SHALL employ physical tamper detection and resistance features appropriate7 The CSP SHALL ensure that all communications occur over a mutually authenticated8 Privacy Considerations9 Usability Considerations
RefTitleText
9 Usability Considerations This section is informative . This section is intended to raise implementers’ awareness of the usability considerations associated with enrollment and identity proofing (for usability considerations for typical authenticator usage and inte
9.1
in 9
 General User Experience Considerations During Enrollment and Identity Proofing This sub-section provides usability considerations that are applicable across all steps of the enrollment process. Usability considerations specific to each step are detailed in Sections 9.2 to 9.4 . • To avoid user frustration, streamline
9.2
in 9
 Pre-Enrollment Preparation This section describes an effective approach to facilitate sufficient pre-enrollment preparation so users can avoid challenging, frustrating enrollment sessions. Ensuring users are as prepared as possible for their enrollment sessions is cr
9.3
in 9
 Enrollment Proofing Session Usability considerations specific to the enrollment session include: • Remind users at the start of the enrollment session of the enrollment session procedure, without expecting them to remember from the pre-enrollment preparation step. If
9.4
in 9
 Post-Enrollment Post-enrollment refers to the step immediately after enrollment but prior to typical usage of an authenticator (for usability considerations for typical authenticator usage and intermittent events, see SP800-63B , Section 10.1-10.3. As desc

5 of 25.