IA-4(7): In-Person Registration

Control Family:

Identification And Authentication

Parent Control:

IA-4: Identifier Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-1
PR.AC-6
PR.AC-7

Threats Addressed:

Spoofing
Repudiation

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: IA-12(4): In-person Validation and Verification.

Control Statement

The organization requires that the registration process to receive an individual identifier be conducted in person before a designated registration authority.

Supplemental Guidance

In-person registration reduces the likelihood of fraudulent identifiers being issued because it requires the physical presence of individuals and actual face-to-face interactions with designated registration authorities.