NIST SP 800-63-4 marks an important transition away from checklist-based requirements towards risk-based digital identity management (DIRM) framework. It places priority on strong phishing-resistant authentication protocols as well as new requirements for subscriber controlled wallet technologies like mobile driver's licenses and verifiable credentials. Trustswiftly's FedRAMP-aligned IAL3...

IAL3 requires an on-site enrollment and identity proofing session with attendance from at least two individuals, in addition to biometric collection of at least one characteristic. Furthermore, more sophisticated threats like evidence falsification, theft, repudiation or advanced social engineering tactics must also be mitigated against. Under IAL3, CSP representatives must verify an...