Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-79-2

Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI)

Date Published: July 2015

Supersedes: SP 800-79-1 (06/18/2008)


Hildegard Ferraiolo (NIST), Ramaswamy Chandramouli (NIST), Nabil Ghadiali (National Gallery of Art), Jason Mohler (Electrosoft Services), Scott Shorter (Electrosoft Services)



assessment; authorization; controls; derived PIV credentials; issuer; Personal Identity Verification; PIV card
Control Families

Assessment, Authorization and Monitoring


Download URL

Supplemental Material:
None available

Related NIST Publications:
FIPS 201-3

Document History:
07/30/15: SP 800-79-2 (Final)