...
Kantara maintains Service Assessment Criteria (SAC) to be used in SP 800-63 rev.3 conformity assessments for identity proofing and authentication services at Assurance Level (AL) 3. These SAC were derived from the strictly normative requirements (i.e. criteria were only developed from guidance expressed using ‘SHALL’) of SP 800-63A and ’63B at IAL2 and AAL2’ respectively63 rev.3, as they applied to Credential Service Providers (CSP). Since their publication Kantara has granted a number of Approvals based on these criteria and anticipates growing interest in these Approvals in the short to medium term.
...
Accordingly, attached are three XLS documents (KIAF-1430 63A_SAC v4.0.6, KIAF-1440 63B_SAC v4.0.3). Each document includes a control tab which we are seeking to have reviewed, namely the tabs labelled ‘63A/B_SAC’.
...