Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Lowest Assurance Level that Mitigates All Impact Categories

Mitigating Controls

Appropriate Assurance Level with Consideration of Mitigating Controls

Proposed E-signature Alternative

Level 3---...appropriate for transactions needing high confidence in the asserted identity's accuracy. People may use Level 3 credentials to access restricted web services without the need for additional identity assertion controls.

Multiple sources of information, some with counter-balancing incentives.  The VMS system provides independent confirmation of the vessel's fishing location. Mandatory landing reports (fish tickets) provide independent confirmation of retained catch.

Vessels reporting are permitted and have an ongoing "trusted relationship" with NMFS.

Approved e-logbook software solutions are required to contain a unique identifier for each e-logbook installation.  Through this unique identifier each logbook submission can be tied to a particular instance of the e-logbook software, and therefore to a particular vessel.

Level 1---Little or no confidence exists in the asserted identity. For example, Level 1 credentials allow people to bookmark items on a web page for future reference.

Note that the overall system design provides more accountability than the paper system it replaces, but, because the accountability is provided by the mitigating controls and is not integral to the e-signature technology, the proposed assurance level is still at OMB level 1.

HMS-like