Identity and Access Management

 View Only

NIST has extended the deadlines to submit comments to drafts of three key pieces of guidance related to digital identity:

  • 1.  NIST has extended the deadlines to submit comments to drafts of three key pieces of guidance related to digital identity:

    Posted Mar 18, 2023 02:14:00 AM

    Hi All,

    NIST has extended the deadlines to submit comments to drafts of three key pieces of guidance related to digital identity:

    Digital Identity Guidelines (NIST SP 800-63-4) | Extended until April 14, 2023 NIST SP 800-63 intends to respond to the changing digital landscape that has emerged since the last major revision of this suite was published in 2017-including the real-world implications of online risks. The guidelines present the process and technical requirements for meeting digital identity management assurance levels for identity proofing, authentication, and federation, including requirements for security and privacy as well as considerations for fostering equity and the usability of digital identity solutions and technology.

    Comment instructions - https://csrc.nist.gov/publications/detail/sp/800-63/4/draft 


    Guidelines for Derived Personal Identity Verification (PIV) Credentials (NIST SP 800-157r1) | Extended until April 21, 2023 NIST SP 800-157 has been revised to feature an expanded set of derived PIV credentials to include public key infrastructure (PKI) and non-PKI-based phishing-resistant multi-factor authenticators.

    Comment instructions - https://csrc.nist.gov/publications/detail/sp/800-157/rev-1/draft


    Guidelines for Personal Identity Verification (PIV) Federation (NIST SP 800-217) | Extended until April 21, 2023 NIST SP 800-217 details technical requirements on the use of federated PIV identity and the interagency use of assertions to implement PIV federations backed by PIV identity accounts and PIV credentials.

    Comment Instructions - https://csrc.nist.gov/publications/detail/sp/800-217/draft



    ------------------------------
    Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA
    ------------------------------