verification

{
  "id": "MLC-T-CYB-004557",
  "term": "verification",
  "field": "Cybersecurity",
  "definition": "1. The process of confirming or denying that a claimed identity is correct by comparing the credentials of a person requesting access with those previously proven and associated with the PIV Card or a derived PIV credential associated with the identity being claimed.\n\n2. A test of a system to prove that it meets all its specified requirements at a particular stage of its development.\n\n3. A process whose purpose is to provide objective evidence that a system or system element fulfills its specified requirements and characteristics. Note: Methods of performing verification action generally include inspection, analysis, demonstration, or test.\n\n4. Confirmation, through the provision of objective evidence, that specified requirements have been fulfilled.\n\n5. The process of confirming or denying that a claimed identity is correct by comparing the credentials (something you know, something you have, something you are) of a person requesting access with those credentials previously proven and stored in the PIV Card or system and associated with the identity being claimed.\n\n6. Confirmation, through the provision of objective evidence, that specified requirements have been fulfilled (e.g., an entity’s requirements have been correctly defined, or an entity’s attributes have been correctly presented; or a procedure or function performs as intended and leads to the expected outcome). Adapted from Verification.\n\n7. The process or act of confirming that the applicant undergoing identity proofing holds the claimed real-life identity represented by the validated identity attributes and associated evidence. Synonymous with identity verification.\n\n8. Confirmation, through the provision of objective evidence, that specified requirements have been fulfilled (e.g., an entity’s requirements have been correctly defined, or an entity’s attributes have been correctly presented; or a procedure or function performs as intended and leads to the expected outcome).\n\n9. Internal phase within the NVD where a second, usually more experienced, NVD Analyst verifies the work completed during the Initial Analysis.\n\n10. The process of producing objective evidence that sufficiently demonstrates that the system satisfies its security requirements and security characteristics with the level of assurance that applies to the system.\n\n11. Process of producing objective evidence that sufficiently demonstrates that the system satisfies its security requirements and security characteristics with the level of assurance that applies to the system.\n\n12. The process of evaluating a system or component to determine whether the products of a given development phase satisfy the conditions imposed at the start of that phase (INCOSE).",
  "abbreviation": "VRF",
  "synonyms": [
    "Identity Verification"
  ],
  "references": [
    "FIPS 201-3",
    "CNSSI 4009-2022 from ISO/IEC/IEEE 24765:2017 (adapted)",
    "CNSSI 4009-2022 from ISO/IEC/IEEE 15288:2015",
    "NIST SP 800-160v1r1 from ISO 9000:2015; NIST SP 800-161r1-upd1 [11/1/2024 errata update] from ISO 9000:2015 (adapted), CNSSI 4009-2022",
    "NIST SP 1800-12b",
    "NIST SP 1800-21B from CNSSI 4009-2022",
    "NIST SP 800-63-4; NIST SP 800-63A-4",
    "NISTIR 7622",
    "NISTIR 8246",
    "NIST IR 8401 from NIST SP 800-160v1r1 (adapted)",
    "NIST IR 8323r1; NIST IR 8441 from NIST SP 800-160v1r1 (§3.4.9, adapted)",
    "NIST CSWP 31",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/verification/"
}