Navigate

SA-4 (10)

SA-4 (10): Use Of Approved Piv Products

The organization employs only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational information systems.

Supplemental

None

CIA Levels
Confidentiality	low
Integrity	low
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SA-4 (10).

Control	Description
IA-2	The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users).
IA-8	The information system uniquely identifies and authenticates non-organizational users (or processes acting on behalf of non-organizational users).

Enhancements

The controls below (if any) add on to the requirements of SA-4 (10).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SA-4 (10).

CCI	Definition
CCI-003116	The organization employs only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational information systems.