---

id: "IA-08(01)" title: "Acceptance of PIV Credentials from Other Agencies" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-08.01" priority: "P1" implementation_level: "system" parent: "IA-08" enhancement: True

---

Statement

Accept and electronically verify Personal Identity Verification-compliant credentials from other federal agencies.

Guidance

Acceptance of Personal Identity Verification (PIV) credentials from other federal agencies applies to both logical and physical access control systems. PIV credentials are those credentials issued by federal agencies that conform to FIPS Publication 201 and supporting guidelines. The adequacy and reliability of PIV card issuers are addressed and authorized using SP 800-79-2.

Assessment Objective: Personal Identity Verification-compliant credentials from other federal agencies are accepted;

Assessment Objective: Personal Identity Verification-compliant credentials from other federal agencies are electronically verified.

Identification and authentication policy

system security plan

procedures addressing user identification and authentication

system design documentation

system configuration settings and associated documentation

system audit records

PIV verification records

evidence of PIV credentials

PIV credential authorizations

other relevant documents or records

Organizational personnel with system operations responsibilities

organizational personnel with information security responsibilities

system/network administrators

system developers

organizational personnel with account management responsibilities

Mechanisms supporting and/or implementing identification and authentication capabilities

mechanisms that accept and verify PIV credentials