...
Lowest Assurance Level that Mitigates All Impact Categories | Mitigating Controls | Appropriate Assurance Level with Consideration of Mitigating Controls | Proposed E-signature Alternative | ||
---|---|---|---|---|---|
Level 3---...appropriate for transactions needing high confidence in the asserted identity's accuracy. People may use Level 3 credentials to access restricted web services without the need for additional identity assertion controls. | Multiple sources of information, some with counter-balancing incentives. | Level 2---On balance, confidence exists that the asserted identity is accurate. Level 2 credentials are appropriate for a wide range of business with the public where agencies require an initial identity assertion (the details of which are verified independently prior to any Federal action). | NPS The VMS system provides independent confirmation of the vessel's location. The agency has technical capability to confirm fishing locations reported on logbook entries. | Level 1---Little or no confidence exists in the asserted identity. For example, Level 1 credentials allow people to bookmark items on a web page for future reference. | HMS-like |