Versions Compared

Version Old Version 70 New Version 71
Changes made by

Larry Talley - NOAA Federal (Unlicensed)

Larry Talley - NOAA Federal (Unlicensed)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Lowest Assurance Level that Mitigates All Impact Categories

Mitigating Controls

Appropriate Assurance Level with Consideration of Mitigating Controls

Proposed E-signature Alternative

Level 3---...appropriate for transactions needing high confidence in the asserted identity's accuracy. People may use Level 3 credentials to access restricted web services without the need for additional identity assertion controls.

Multiple sources of information, some with counter-balancing incentives.  The VMS system provides independent confirmation of the vessel's location. Mandatory landing reports provide independent confirmation of retained catch.

Vessels reporting are permitted and have an ongoing "trusted relationship" with NMFS.
The VMS system provides independent confirmation of the vessel's location. The agency has technical capability to confirm fishing locations reported on logbook entries.


Approved e-logbook software solutions are required to contain a unique identifier for each e-logbook installation.  Through this unique identifier each logbook submission can be tied to a particular instance of the e-logbook software, and therefore to a particular vessel.

Level 1---Little or no confidence exists in the asserted identity. For example, Level 1 credentials allow people to bookmark items on a web page for future reference.

Note that the overall system design provides more accountability than the paper system it replaces, but, because the accountability is provided by the mitigating controls and is not integral to the e-signature technology, the proposed assurance level is still at OMB level 1.

HMS-like