Documents/NSTIC/1: Identity Ecosystem Framework/1.2: Participant Responsibilities

1.2: Participant Responsibilities

Define participant responsibilities in the Identity Ecosystem and establish mechanisms to provide accountability.

Other Information:

Key elements of the Identity Ecosystem Framework are defining the rights and responsibilities of the various participants in the Identity Ecosystem and establishing an enforcement mechanism, if participants do not carry out these responsibilities. To define these responsibilities, the Federal Government must address liability issues within the Identity Ecosystem (e.g., should there be liability caps or floors on identity providers if credentials are fraudulently used?). These liability concerns have historically prevented organizations from providing and using identity and attribute provider services. The Federal Government needs to establish new or amend existing policies and laws to address these liability concerns and to establish the enforcement mechanisms that provide accountability. Multiple entities currently enforce online security and privacy standards in a distributed fashion across both government and the private sector. Any new laws and policies must maintain the flexibility of this approach, while harmonizing a diverse and sometimes conflicting set of requirements that currently prevents interoperability and trust across communities.

Indicator(s):