IA-12(4): In-person Validation and Verification

Control Family:

Identification and Authentication

Parent Control:

IA-12: Identity Proofing

CSF v1.1 References:

PR.AC-1
PR.AC-6

Threats Addressed:

Spoofing
Repudiation
Lateral Movement

Baselines:

High

Control is new to this version of the control set and incorporates the following controls from the previous version: IA-4(7): In-Person Registration, IA-5(3): In-Person Or Trusted Third-Party Registration.

Control Statement

Require that the validation and verification of identity evidence be conducted in person before a designated registration authority.

Supplemental Guidance

In-person proofing reduces the likelihood of fraudulent credentials being issued because it requires the physical presence of individuals, the presentation of physical identity documents, and actual face-to-face interactions with designated registration authorities.