Back

Establish, implement, and maintain a registration database.


CONTROL ID
15048
CONTROL TYPE
Data and Information Management
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Operational management, CC ID: 00805

This Control has the following implementation support Control(s):
  • Grant registration after competence and integrity is verified., CC ID: 16802
  • Include contact details in the registration database., CC ID: 15109
  • Include personal data in the registration database, as necessary., CC ID: 15108
  • Make the registration database available to the public., CC ID: 15107
  • Impose conditions or restrictions on the termination or suspension of a registration., CC ID: 16796
  • Publish the IP addresses being used by each external customer in the registration database., CC ID: 16403
  • Maintain the accuracy of registry information published in registration databases., CC ID: 16402
  • Include all required information in the registration database., CC ID: 15106


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • The Commission shall, in collaboration with the Member States, set up and maintain a EU database containing information referred to in paragraph 2 concerning high-risk AI systems referred to in Article 6(2) which are registered in accordance with Article 51. (Article 60 1., Proposal for a Regulation of The European Parliament and of The Council Laying Down Harmonized Rules On Artificial Intelligence (Artificial Intelligence Act) and Ameding Certain Union Legislative Acts)
  • The card issuer SHALL maintain the enrollment record for each issued PIV Card. These enrollment records are created and maintained through the methods of contemporaneous acquisition at each step of the PIV issuance process—typically including identity proofing, registration, and biometric enrollme… (2.6 ¶ 1, FIPS Pub 201-3, Personal Identity Verification (PIV) of Federal Employees and Contractors)
  • PKI-based derived PIV Credentials (i.e., those containing attribute information describing the PIV cardholder) SHALL be updated or reissued as described in [SP 800-157] Section 2.3 when the corresponding PIV Card is updated or reissued. Non-PKI derived PIV credentials are not required to be updated … (2.10.3 ¶ 1, FIPS Pub 201-3, Personal Identity Verification (PIV) of Federal Employees and Contractors)
  • The requirements for identity proofing and registration also apply to citizens of foreign countries who are working for the U.S. Federal Government overseas. However, a process for identity proofing and registration SHALL be established using a method approved by the U.S. Department of State's Burea… (2.7 ¶ 12, FIPS Pub 201-3, Personal Identity Verification (PIV) of Federal Employees and Contractors)