Documents/NSTIC/5: Commitment to Action/A5: Risk Models and Interoperability Standards

A5: Risk Models and Interoperability Standards

Coordinate the Development and Refinement of Risk Models and Interoperability Standards

Other Information:

A set of risk-based models and assessment tools will support the decisions that organizations make to determine how they will operate within the Identity Ecosystem. The risk model will minimize ambiguity associated with the ways in which risk-based controls are determined and established nationwide. Standards that cover interoperability requirements, trustmark criteria, and accreditation will pave a path that supports choice across solutions, ultimately accelerating Identity Ecosystem adoption. All detailed actions associated with Identity Ecosystem standards will build on existing efforts undertaken by the Federal Government, trust framework providers, private sector, standards bodies, and international organizations. Standards established within the Identity Ecosystem will require incorporation of privacy guidelines. They should also require, to the extent feasible, adoption of protocols that minimize the ability to link or aggregate transactions and transaction data across Identity Ecosystem participants and relying parties, while maintaining individual transaction history, integrity, and auditability. Standards development, adoption, or enhancement will support autonomy and choice among Identity Ecosystem providers and flexibility within industry sectors, while facilitating cross-sector and international interoperability.

Indicator(s):