IA-4(3): Multiple Forms Of Certification

Control Family:

Identification And Authentication

Parent Control:

IA-4: Identifier Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

Threats Addressed:

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: IA-12(2): Identity Evidence.

Control Statement

The organization requires multiple forms of certification of individual identification be presented to the registration authority.

Supplemental Guidance

Requiring multiple forms of identification, such as documentary evidence or a combination of documents and biometrics, reduces the likelihood of individuals using fraudulent identification to establish an identity, or at least increases the work factor of potential adversaries.