← Back to catalog
SA-4(10)
Use of Approved PIV Products
System and Services Acquisition (SA)
Baselines
Low · IncludedModerate · IncludedHigh · Included
Description
Employ only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational systems.
Discussion
Products on the FIPS 201-approved products list meet NIST requirements for Personal Identity Verification (PIV) of Federal Employees and Contractors. PIV cards are used for multi-factor authentication in systems and organizations.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.