Is there a list of “approved” identity proofing and registration processes?
There is not a list of “approved” identity proofing and registration processes, per se. “Approved” means that the process has met the control objectives, and the head of the agency has approved in writing that the process does meet the objectives. SP 800-79 provides further guidance on the certification and accreditation of PIV card issuing organizations. (See FIPS-201, Section 2) Back to the Top Is Personal Identity Verification different from access authorization such that having a PIV card or achieving identity verification does not automatically entitle the cardholder to physical or logical access? Yes. Access control remains the purview of the local facility or IT system security policy.
