CCI-002004

Defines the biometric quality requirements to be employed by the mechanisms for biometric-based authentication.

Implementation Guidance

The organization being inspected/assessed defines and documents quality requirements to be employed by the information system mechanisms. Quality requirements shall include minimum requirements for accurate identification. NIST has draft documentation for biometrics available at http://csrc.nist.gov/publications/PubsSPs.html. DoD has determined the biometric quality requirements are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documented requirements to ensure they have been defined and include minimum requirements for accurate identification. DoD has determined the biometric quality requirements are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated SOP/TTP documenting quality requirements to be employed by the information system mechanisms.

The controls below (if any) were marked by NIST as being related to CCI-002004.