SA-04(10) Use of Approved PIV Products
Employ only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational systems.
Products on the FIPS 201-approved products list meet NIST requirements for Personal Identity Verification (PIV) of Federal Employees and Contractors. PIV cards are used for multi-factor authentication in systems and organizations.
Related controls 3
- IA-02 Identification and Authentication (Organizational Users) L M H P
- IA-08 Identification and Authentication (non-organizational Users) L M H P
- PM-09 Risk Management Strategy L M H P