NIST Rev. 4 Suggestions (January 2022 IAWG meetings)

Possible areas to comment on Rev. 4:

  • 5.3.3.2 - Requirements for Supervised Remote In-Person Proofing - The CSP SHALL employ physical tamper detection and resistance features appropriate for the environment in which it is located. For example, a kiosk located in a restricted area or one where it is monitored by a trusted individual requires less tamper detection than one that is located in a semi-public area such as a shopping mall concourse. - Send guidance on what we consider appropriate for an environment. 

  • Comparable Alternative Controls – how they will be addressed?

    • Inclusiveness suggestions 

    • Bring up impact of current controls, inefficiency and lack of inclusion

  • Federation Agreements

  • Inclusion of NIST white paper - new ways to look at authentication? 

Less content/ more clerical:

  • Document structure - separating the criteria from the normative statements

  • Consistency in use of terms