Skip to main content

Appendix E: Digital Identity Level (DIL) Determination

The Digital Identity Level (DIL) is represented on the page below.

system security plan digital identity level page image

Within system-characteristics there must be three entries to the props array as follows:

  • name set to identity-assurance-level and a value set to 1, 2 or 3.
  • name set to authenticator-assurance-level and a value set to 1, 2 or 3.
  • name set to federation-assurance-level and a value set to 1, 2 or 3.
  • The value of all three should match each other and align with the FIPS-199 impact level of the system.

OSCAL Representation

system-security-plan:
  system-characteristics:
    props:
    - name: identity-assurance-level
      value: '2'
    - name: authenticator-assurance-level
      value: '2'
    - name: federation-assurance-level
      value: '2'

OSCAL Allowed Values

Valid IAL, AAL, and FAL values (as defined by NIST SP 800-63):

  • 1
  • 2
  • 3

No comments to display

Back to top