U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

White Paper NIST CSWP 4

Best Practices for Privileged User PIV Authentication

Date Published: April 21, 2016


Computer Security Division, Applied Cybersecurity Division,



identification; multi-factor authentication; Personal Identity Verification (PIV); PIV Card; privileged access; Cybersecurity Strategy and Implementation Plan (CSIP); privileged use; Derived PIV Credential; authentication
Control Families

Access Control; Identification and Authentication; System and Communications Protection


White Paper (DOI)

Supplemental Material:
Local Download (pdf)

Document History:
02/05/16: White Paper (Draft)
04/21/16: White Paper NIST CSWP 4 (Final)