Address Confirmation - Supervised IAL3, v3.0

Requirements for address confirmation for high assurance.

Assessment Steps (2)

1
Address Confirmation (AddressConfirmation)
Does the CSP verify the applicant's address of record either by taking it from valid identity evidence or validating it with the issuing source if provided by the applicant?
Artifact
Documentation
Provide policies and practices indicating conformance.
2
Self-asserted (Self-asserted)
Does the CSP NOT use purely self-asserted address data?
Artifact
Documentation
Provide policies and practices indicating conformance.

Conformance Criteria (2)

Address Confirmation
The CSP SHALL confirm the Applicant's address of record using either:
  1. only information taken from any piece of valid identity evidence; OR
  2. for information values which might reasonably be amended from time-to-time, information substituted by the Applicant which SHALL be validated with the issuing source of the information.
Citation
SP800-63A
Section 4.5.6 (IAL3)
Self-asserted
Self-asserted address data SHALL NOT be used for confirmation.
Citation
SP800-63A
Section 4.5.6 (IAL3)