Assurance

["Roy, Nicholas S" <>]

I got some feedback from the Big Ten auditors – three responses from three different schools.  A summary of the comments is posted as a comment on the remote proofing wiki (https://spaces.internet2.edu/display/InCAssurance/Remote-Proofing+Approaches) and also below:

 

1) The notary approach might work

2) They don't like the video approach, but did not give specific reasons why

3) They think the eVerify process used for I9 stuff in HR processes is good enough to use for proofing (not remote, really, but OK I think this is good news for existing relationship stuff)

4) Quote:

"I don't know how InCommon relates to NIST 800-63, but 800-63 seems clearer.  It says that remote proofing for Level 2 or 3 requires validation of the gov't ID and/or financial acct, plus address validation.  The latter is not a substitute for the former."

To me that says if you take this to be 800-63 rules, then you also need to validate the ID at LoA2/Silver.  But then again, "Silver is not 800-63 level 2, Silver is Silver."

 

Best,

 

Nick