unified
UC-ACCESS-07 — Proof identities before binding credentials
The identity of users is verified through documented evidence checks proportional to the assurance level of the access requested before initial credentials are issued. The proofed identity is bound to its credentials and recorded, and re-proofing occurs on credential recovery or other high-risk changes.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Access Control & Identity Management
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-ACCESS-07
- title
- Proof identities before binding credentials
- statement
- The identity of users is verified through documented evidence checks proportional to the assurance level of the access requested before initial credentials are issued. The proofed identity is bound to its credentials and recorded, and re-proofing occurs on credential recovery or other high-risk changes.
- domain
- Access Control & Identity Management
- control_type
- preventive
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- IA-12
- coverage
- full
- relationship
- superset_of
- framework
- nist-csf-2
- control_id
- PR.AA-02
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-ACCESS-07 — Proof identities before binding credentials mitigates Phishing, spear-phishing and social engineering
- strength
- related
- rationale
- Re-proofing on credential recovery defends against social-engineering of help-desk account-recovery takeover.
- UC-ACCESS-07 — Proof identities before binding credentials maps_to PR.AA-02 — Identity Management, Authentication, and Access Control: Identities are proofed and bound to credentials based on the context of interactions
- framework
- nist-csf-2
- control_id
- PR.AA-02
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2.0
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-ACCESS-07 — Proof identities before binding credentials maps_to IA-12 — Identity Proofing
- framework
- nist-800-53
- control_id
- IA-12
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Identity Assurance Review oversees UC-ACCESS-07 — Proof identities before binding credentials
- UC-ACCESS-07 — Proof identities before binding credentials mitigates Abuse of rights, forged rights, and repudiation of actions
- strength
- related
- rationale
- Proofing and binding identity to credentials prevents fraudulent enrollment and forged-identity credential issuance.
- Identity & Authenticator Lifecycle Administration operates UC-ACCESS-07 — Proof identities before binding credentials
- UC-ACCESS-07 — Proof identities before binding credentials mitigates External fraud — third-party theft, forgery, payment and account fraud
- strength
- primary
- rationale
- Evidence-based identity proofing before credential issuance, with re-proofing on recovery, directly defeats identity theft, impersonation, and fraudulent-application account fraud.