>myctrl.tools
GitHub

IA-5(16)In-Person Or Trusted External Party Authenticator Issuance

>Control Description

Require that the issuance of [Assignment: organization-defined types of and/or specific authenticators] be conducted [Selection (one): in person; by a trusted external party] before [Assignment: organization-defined registration authority] with authorization by [Assignment: organization-defined personnel or roles].

>Supplemental Guidance

Issuing authenticators in person or by a trusted external party enhances and reinforces the trustworthiness of the identity proofing process.

>Related Controls