PR.AA-02 - Verifying Identities for Credential Issuance

PR.AA-02 requires verifying the identities of individuals or entities before binding them to credentials, tailoring the proofing process to the context of their intended interactions. This might involve checking government-issued IDs for personnel or ensuring unique credentials are issued without sharing, confirming legitimacy at enrollment. It ensures that credentials accurately represent authorized users or devices.

This subcategory strengthens authentication by establishing trust in the identity-credential relationship, reducing the risk of impersonation or misuse. It aligns proofing rigor with the sensitivity of interactions, enhancing security for high-risk access scenarios. PR.AA-02 builds a reliable identity foundation for access control measures.