SA-4(10): Use Of Approved Piv Products

Control Family:

System And Services Acquisition

Parent Control:

SA-4: Acquisition Process

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.IP-2
DE.CM-6

Threats Addressed:

Spoofing

Baselines:

Low
Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
SA-4(10): Use of Approved PIV Products

Control Statement

The organization employs only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational information systems.