NIST Rev. 4 Suggestions (January 2022 IAWG meetings)

Possible areas to comment on Rev. 4:

• 5.3.3.2 - Requirements for Supervised Remote In-Person Proofing - The CSP SHALL employ physical tamper detection and resistance features appropriate for the environment in which it is located. For example, a kiosk located in a restricted area or one where it is monitored by a trusted individual requires less tamper detection than one that is located in a semi-public area such as a shopping mall concourse. - Send guidance on what we consider appropriate for an environment. 

• Comparable Alternative Controls – how they will be addressed?

  • Inclusiveness suggestions 

  • Bring up impact of current controls, inefficiency and lack of inclusion

• Federation Agreements

• Inclusion of NIST white paper - new ways to look at authentication? 

Less content/ more clerical:

• Document structure - separating the criteria from the normative statements

• Consistency in use of terms