CCI-004096

Implementation Guidance

Determine if: - identity evidence is collected. - identity evidence is validated. - identity evidence is verified.

Validation Procedures

Examine: [SELECT FROM: Identification and authentication policy; procedures addressing identity proofing; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system operations responsibilities; organizational personnel with information security and privacy responsibilities; legal counsel; system/network administrators; system developers; organizational personnel with identification and authentication responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing identification and authentication capabilities].