id: "IA-12(04)" title: "In-person Validation and Verification" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-12.04" priority: "P1" implementation_level: "organization" parent: "IA-12" enhancement: True
Statement
Require that the validation and verification of identity evidence be conducted in person before a designated registration authority.
Guidance
In-person proofing reduces the likelihood of fraudulent credentials being issued because it requires the physical presence of individuals, the presentation of physical identity documents, and actual face-to-face interactions with designated registration authorities.
Assessment Objective
the validation and verification of identity evidence is conducted in person before a designated registration authority.
Identification and authentication policy
procedures addressing identity proofing
system security plan
other relevant documents or records
Organizational personnel with system operations responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
organizational personnel with identification and authentication responsibilities
Mechanisms supporting and/or implementing identification and authentication capabilities