---

id: "IA-05(16)" title: "In-person or Trusted External Party Authenticator Issuance" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-05.16" priority: "P1" implementation_level: "organization" parent: "IA-05" enhancement: True

---

Statement

Require that the issuance of {{ insert: param, ia-05.16_odp.01 }} be conducted {{ insert: param, ia-05.16_odp.02 }} before {{ insert: param, ia-05.16_odp.03 }} with authorization by {{ insert: param, ia-05.16_odp.04 }}.

Guidance

Issuing authenticators in person or by a trusted external party enhances and reinforces the trustworthiness of the identity proofing process.

Assessment Objective

the issuance of {{ insert: param, ia-05.16_odp.01 }} is required to be conducted {{ insert: param, ia-05.16_odp.02 }} before {{ insert: param, ia-05.16_odp.03 }} with authorization by {{ insert: param, ia-05.16_odp.04 }}.

Identification and authentication policy

procedures addressing identifier management

system security plan

system design documentation

mechanisms providing dynamic binding of identifiers and authenticators

system configuration settings and associated documentation

system audit records

other relevant documents or records

Organizational personnel with identification and authentication management responsibilities

organizational personnel with information security responsibilities

system/network administrators

Mechanisms supporting and/or implementing account management capability

mechanisms supporting and/or implementing identification and authentication management capabilities for the system