CCI-004106

Require that a registration code or notice of proofing be delivered through an out-of-band channel to verify the users address (physical or digital) of record.

Implementation Guidance

Determine if a [IA-12(05)_ODP; one of the following PARAMETER VALUES is selected: {registration code; notice of proofing}] is delivered through an out-of-band channel to verify the user's address (physical or digital) of record.

Validation Procedures

Examine: [SELECT FROM: Identification and authentication policy; procedures addressing identity proofing; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with system operations responsibilities; organizational personnel with information security responsibilities; system/network administrators; system developers; organizational personnel with identification and authentication responsibilities]. Test: [SELECT FROM: Mechanisms supporting and/or implementing identification and authentication capabilities].

The controls below (if any) were marked by NIST as being related to CCI-004106.