Remote Supervised - Presence, v3.0
The requirements for presence verification during remote supervised identity proofing.
Assessment Steps (4)
|
1
No Departure (NoDeparture)
During a remote proofing session, does the CSP ensure the applicant DOES NOT depart?
Artifact
Documentation
Provide policies, practices, or existing security audit reports indicating conformance.
|
|
2
Entire Single Session (EntireSingleSession)
Does the CSP ensure the Proofing Supervisor participates with the applicant for the entire Remote identity proofing session?
Artifact
Documentation
Provide policies, practices, or existing security audit reports indicating conformance.
|
|
3
Witness (Witness)
Does the CSP ensure the proofing supervisor witnesses all actions taken by the applicant?
Artifact
Documentation
Provide policies, practices, or existing security audit reports indicating conformance.
|
|
4
Integrated Verification (IntegratedVerification)
Does the CSP ensure that all digital verification of evidence is performed by devices integrated into the CSP owned/managed remote proofing terminal?
Artifact
Documentation
Provide policies, practices, or existing security audit reports indicating conformance.
|
Conformance Criteria (4)
|
No Departure
If the CSP provides Supervised Remote proofing the CSP SHALL ensure that a Proofing Supervisor participates throughout the entirety of a Remote proofing session, from which the Applicant SHALL NOT depart.
Citation
SP800-63A
Section 5.3.3.2 P1
|
|
Entire Single Session
The CSP SHALL ensure that a Proofing Supervisor participates with the Applicant for the entirety of a Remote identity proofing session.
Citation
SP800-63A
Section 5.3.3.2 P2
|
|
Witness
The CSP SHALL ensure that a Proofing Supervisor clearly witnesses all actions taken by the Applicant, for the entirety of a Remote identity proofing session.
Citation
SP800-63A
Section 5.3.3.2 P3
|
|
Integrated Verification
The CSP SHALL ensure that all digital verification of evidence is performed by scanners and sensors which are integrated into the CSP-owned/managed Remote proofing terminal.
Citation
SP800-63A
Section 5.3.3.2 P4
|