IA-8(1)

Requirement

Accept and electronically verify Personal Identity Verification-compliant credentials from other federal agencies.

Discussion

Acceptance of Personal Identity Verification (PIV) credentials from other federal agencies applies to both logical and physical access control systems. PIV credentials are those credentials issued by federal agencies that conform to FIPS Publication 201 and supporting guidelines. The adequacy and reliability of PIV card issuers are addressed and authorized using SP 800-79-2.

Title

Identification and Authentication (non-organizational Users) | Acceptance of PIV Credentials from Other Agencies
Family

Identification and Authentication
NIST 800-53B Baseline(s)
- Low
- Moderate
- High

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Identification and authentication policy; system security plan; procedures addressing user identification and authentication; system design documentation; system configuration settings and associated documentation; system audit records; PIV verification records; evidence of PIV credentials; PIV credential authorizations; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with system operations responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers; organizational personnel with account management responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing identification and authentication capabilities; mechanisms that accept and verify PIV credentials].

ID	Assessment Objectives
IA-08(01)[01]	Personal Identity Verification-compliant credentials from other federal agencies are accepted;
IA-08(01)[02]	Personal Identity Verification-compliant credentials from other federal agencies are electronically verified.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!