IA-5(16) In-person or Trusted External Party Authenticator Issuance
Control enhancement of IA-5 Authenticator Management
Control
Require that the issuance of [Assignment: types of and/or specific authenticators] be conducted [Assignment: Selection: in person | by a trusted external party] before [Assignment: registration authority] with authorization by [Assignment: personnel or roles].
Discussion
Issuing authenticators in person or by a trusted external party enhances and reinforces the trustworthiness of the identity proofing process.
Related controls
Need IA-5(16) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.