IA-8(1): Acceptance of PIV Credentials from Other Agencies
Control Family:
Threats Addressed:
Baselines:
- Low
- Moderate
- High
- OT Low (SP 800-82r3)
- OT Moderate (SP 800-82r3)
- OT High (SP 800-82r3)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- IA-8(1): Acceptance Of Piv Credentials From Other Agencies
Control Statement
Accept and electronically verify Personal Identity Verification-compliant credentials from other federal agencies.
Supplemental Guidance
Acceptance of Personal Identity Verification (PIV) credentials from other federal agencies applies to both logical and physical access control systems. PIV credentials are those credentials issued by federal agencies that conform to FIPS Publication 201 and supporting guidelines. The adequacy and reliability of PIV card issuers are addressed and authorized using SP 800-79-2.
OT Discussion
Acceptance of PIV credentials is only required for organizations that follow OMB Memorandum M-19-17 [OMB-M1917] (e.g., federal agencies and contractors).