NIST 800-53 Rev. 5

IA-2(12): Identification and Authentication (organizational Users) | Acceptance of PIV Credentials

Control Text:

Accept and electronically verify Personal Identity Verification-compliant credentials.

Acceptance of Personal Identity Verification (PIV)-compliant credentials applies to organizations implementing logical access control and physical access control systems. PIV-compliant credentials are those credentials issued by federal agencies that conform to FIPS Publication 201 and supporting guidance documents. The adequacy and reliability of PIV card issuers are authorized using SP 800-79-2. Acceptance of PIV-compliant credentials includes derived PIV credentials, the use of which is addressed in SP 800-166. The DOD Common Access Card (CAC) is an example of a PIV credential.

Related Controls

  • None