NOTICE: Public review for comments and IPR review for Kantara Initiative xAL3 SACs
Dear Kantara Initiative Members and Community,
...
Two years ago, Kantara developed Service Assessment Criteria (SAC) to be used in SP 800-63 rev.3 conformity assessments for identity proofing and authentication services at Assurance Level (AL) 2. These SAC were derived from the strictly normative requirements (i.e. criteria were only developed from guidance expressed using ‘SHALL’) of SP 800-63A and ’63B at IAL2 and AAL2’ respectively, as they applied to Credential Service providers (CSP). Since their publication Kantara has granted a number of Approvals based on these criteria and anticipates growing interest in these Approvals in the short to medium term. The sponsor of that work, ID.me, generously provided to Kantara additional sponsorship to develop SAC focused on SP 800-63C, i.e. addressing federations, at FAL2.ID.me has now extended their generous support to enable Kantara Initiative to develop level 3 criteria, i.e. IAL3, AAL3 and FAL3.
A contracted editor has developed draft criteria for the three SACs and these reviewed the current version and proposed revisions for clarification. These have been reviewed by a sub-group of the Identity Assurance Work Group (IAWG). In addition to this, the IAL2 and AAL2 criteria have been reviewed and some additional criteria, previously excluded because they did not apply directly to CSPs, have been introduced to provide the same scope of coverage as was developed for FAL2. There have There have also been some consequential changes to align criteria. The IAWG has now reviewed and approved each of these xAL3 extensions revisions and Kantara is now releasing these criteria for a 45-day Public Review.
Accordingly, attached are three XLS documents (KIAF-1430 63A_SAC v3v4.10.106, KIAF-1440 63B_SAC v3v4.0.73, KIAF-1450 63C_SAC v0.17.0). Each document includes a control tab which we are seeking to have reviewed, namely the tabs labelled ‘63A/B/C_SAC’.
In each of the subject tabs you need only review those criteria which are, in part or whole, in red text. The subject tabs include:
...
Kantara
...
Kantara invites your review of these documents and asks that you submit any comments and proposed revisions on or before 2020before 2021-0910-2113. As this deadline will be strictly adhered to, late submissions will not be taken into account.
...