Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Lowest Assurance Level that Mitigates All Impact Categories

Mitigating Controls

Appropriate Assurance Level with Consideration of Mitigating Controls

Proposed E-signature Alternative

Level 3---...appropriate for transactions needing high confidence in the asserted identity's accuracy. People may use Level 3 credentials to access restricted web services without the need for additional identity assertion controls.

Multiple sources of information, some with counter-balancing incentives.

Vessels reporting are permitted and have an ongoing "trusted relationship" with NMFS.

Level 2---On balance, confidence exists that the asserted identity is accurate. Level 2 credentials are appropriate for a wide range of business with the public where agencies require an initial identity assertion (the details of which are verified independently prior to any Federal action).

NPS The VMS system provides independent confirmation of the vessel's location. The agency has technical capability to confirm fishing locations reported on logbook entries.
Approved e-logbook software solutions are required to contain a unique identifier for each e-logbook installation.  Through this unique identifier each logbook submission can be tied to a particular instance of the e-logbook software, and therefore to a particular vessel.

Level 1---Little or no confidence exists in the asserted identity. For example, Level 1 credentials allow people to bookmark items on a web page for future reference.

Note that the overall system design provides more accountability than the paper system it replaces, but, because the accountability is provided by the mitigating controls and is not integral to the e-signature technology, the proposed assurance level is still at OMB level 1.

HMS-like