CCI-004104

Require that the validation of identity evidence be conducted in person before a designated registration authority.

Implementation Guidance

Determine if the validation and verification of identity evidence is conducted in person before a designated registration authority.

Validation Procedures

Examine: [SELECT FROM: Identification and authentication policy; procedures addressing identity proofing; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system operations responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers; organizational personnel with identification and authentication responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing identification and authentication capabilities].

The controls below (if any) were marked by NIST as being related to CCI-004104.