PE-2(2): Two Forms Of Identification

Control Family:

Physical And Environmental Protection

Parent Control:

PE-2: Physical Access Authorizations

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-2
PR.AC-6

Threats Addressed:

Spoofing
Repudiation

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
PE-2(2): Two Forms of Identification

Control Statement

The organization requires two forms of identification from [Assignment: organization-defined list of acceptable forms of identification] for visitor access to the facility where the information system resides.

Supplemental Guidance

Acceptable forms of government photo identification include, for example, passports, Personal Identity Verification (PIV) cards, and drivers' licenses. In the case of gaining access to facilities using automated mechanisms, organizations may use PIV cards, key cards, PINs, and biometrics.