...
3.2.Initial proof of identity
- the home organization Home Organization has a documented identity vetting process process (whatever it is) in English and you can study it?
- each Home Organisation has a tag that indicates how the organization carries out identity proofing and the tag is from a well-defined international vocabulary?
- each user in a Home Organisation has the above tag but different end users in the organization can have different tags (depending how their identity was initially proofed)?
- The identity proofing is done face identity vetting process is face-to-face (presenting based on a government photo-ID) or ID or equivalent?
3.3.On-line authentication
- Are password-based authentication good enough for you?
- Or should passwords have some kind of quality floor? (What kind of quality floor?)
- Do you need two factor authentication? (What kind of?)
...