Law / Frameworks / NIST CSF 2.0 / Protect
NIST CSF 2.0, ProtectPR.AA-02
Identities are proofed and bound to credentials based on the context of interactionsNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), PR.AA-02
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 1
- law
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication |
Create personalized security credentials in a secure environment and mitigate the risks of their unauthorized use following loss, theft or copying before delivery to the payer. Associate only the payment service user, in a secure manner, with the credentials, authentication devices and software, in secure environments under your responsibility, and use strong customer authentication when the association is made through a remote channel. Deliver them in a secure manner, with delivery mechanisms that ensure they reach the legitimate user, a means to verify the authenticity of authentication software delivered by means of the internet, and activation before first use. Apply the same procedures to renewal and re-activation, and have effective processes for the secure destruction, deactivation or revocation of credentials, devices and software and for the secure re-use of reusable devices and software (Articles 23 to 27). |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.