Navigate

IA-5(3)

IA-5(3): In-person or Trusted Third-party Registration

The organization requires that the registration process to receive [organization-defined types of and/or specific authenticators] be conducted [] before [organization-defined registration authority] with authorization by [organization-defined personnel or roles].

Supplemental

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to IA-5(3).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of IA-5(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to IA-5(3).

CCI	Definition
CCI-001992	The organization defines the personnel or roles responsible for authorizing the organization's registration authority accountable for the authenticator registration process.
CCI-001993	The organization defines the registration authority accountable for the authenticator registration process.
CCI-001994	The organization defines the types of and/or specific authenticators that are subject to the authenticator registration process.
CCI-001995	The organization requires that the registration process, to receive organization-defined types of and/or specific authenticators, be conducted in person, or by a trusted third-party, before an organization-defined registration authority with authorization by organization-defined personnel or roles.