Hi All,
The final public drafts (fpd) of NIST SP 800-157r1, Guidelines for Derived Personal Identity Verification (PIV) Credentials, and SP 800-217, Guidelines for Personal Identity Verification (PIV) Federation, are now available for public review and comment.
- SP 800-157r1 fpd details the expanded set of derived PIV credentials in a variety of form factors and authenticator types, as envisioned in OMB Memoranda M-19-17 and M-22-09 and subsequently outlined in FIPS 201-3.
- SP 800-217 fpd details the cross-domain and interagency use of the derived PIV credentials using federation protocols.
Both guidelines address the comments received on the 2023 initial public drafts and align with the recently published second public draft of SP 800-63-4, Digital Identity Guidelines.
The public comment period for both final drafts are open through January 10, 2025. See the publication details for https://doi.org/10.6028/NIST.SP.800-157r1.fpd and https://doi.org/10.6028/NIST.SP.800-217.fpd to download the drafts and find instructions for submitting comments. Comments should be submitted to [email protected].all or parts of the publications using the comment template that is available on the publication details page. Comments received in response to this request will be posted online aReviewers are encouraged to comment on fter the due date. Submitters' names and affiliations (when provided) will be included, while contact information will be removed. Please direct questions and comments to [email protected].
------------------------------
Michael Roza CPA, CISA, CIA, CC, CCSKv5, CCZTv1, MBA, EMBA, CSA
------------------------------