NIST 800-53 REV 5 • IDENTIFICATION AND AUTHENTICATION
IA-4(3) — Multiple Forms of Certification
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Practitioner Notes
This enhancement requires multiple forms of certification to verify a person's identity before issuing them system credentials — more rigorous identity proofing.
Example 1: Require new employees to present two forms of government-issued ID (e.g., passport and driver's license) during in-person onboarding before issuing network credentials.
Example 2: For remote onboarding, use a video identity verification service that compares the person to their government ID photo and validates the ID document's authenticity.