Skip to main content
Image coming soon

NIST SP 800-63 Digital Identity Guidelines Evidence & Implementation Kit

$249.00
Adding to cart… The item has been added
NIST SP 800-63 Digital Identity Guidelines · Digital identity assurance, made adopt-ready · Evidence & Implementation Kit
Meet the NIST SP 800-63 Digital Identity Guidelines, without decoding the guidelines yourself.
Every requirement handed to you as an adopt-ready control, risk-based assurance levels through identity proofing and authentication to federation, sessions and fraud, with the evidence an assessor examines.
Ready in a weekend, not a quarter.

Here is the honest situation. The NIST SP 800-63 Digital Identity Guidelines define how to establish and use digital identity across three components: identity proofing (IAL), authentication (AAL) and federation (FAL). They require selecting assurance levels from a risk assessment, proofing identities, issuing and managing authenticators including multi-factor and phishing-resistant methods, modern password guidance, secure sessions, secure federation, privacy, usability and fraud mitigation. An organization picking authentication without assurance levels is exactly where organizations fall short.

This Kit removes the guesswork. It is the NIST SP 800-63 Digital Identity Guidelines written as adopt-ready controls you personalize in a weekend, with the evidence an assessor examines.

What you get, the moment you buy

18
Requirements as adopt-ready controls. Every requirement, written so you personalize and apply it.
18
Evidence-they-examine checklists. For each control, exactly what an assessor examines, plus where organizations fall short, so you close the gap first.
1
Control Matrix, pre-built. Every requirement in a working spreadsheet, ready to record status, owner and evidence location.
1
Gap & Readiness Assessment. Score each requirement and the workbook returns your readiness as a single percentage, and exactly what to fix next.

Grounded in the NIST SP 800-63 Digital Identity Guidelines. Editable Word and Excel files.

Identity is three components, not one
Proofing, authentication and federation each carry their own assurance. This Kit turns SP 800-63 into adopt-ready controls with the evidence an assessor asks for.

What one control looks like

This is the opening control, where the program begins. All 18 are built to this depth.

DI-1 Adopt the digital identity model SCOPE
Put this control in place

Adopt the NIST SP 800-63 digital identity model at [your organization name], treating identity proofing, authentication and federation as distinct components with their own assurance, and document it, so identity is structured and the organization can evidence its adoption.

Component note.

NIST SP 800-63 Digital Identity Guidelines separate identity assurance (IAL), authentication assurance (AAL) and federation assurance (FAL).

Evidence an assessor examines
  • The 800-63 model adopted
  • Proofing, authentication and federation distinguished
  • Records of the adoption
Common finding they raise: Digital identity is managed without distinguishing proofing, authentication and federation.

Why this is not another template pack

  • The evidence is the point. A requirement you cannot evidence is a gap waiting to be found. This tells you what an assessor examines and where organizations fall short, for every requirement.
  • The specifics built in. The component's distinctive requirements are written into the controls, not left generic.
  • Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
  • It compounds. This work shares its shape with related security and safety frameworks, so it feeds your wider program.

Who buys this

Identity, security and product teams running identity proofing, authentication and federation. Whether it is a first assurance baseline or an authentication uplift, you save weeks and walk in with your IAL, AAL and FAL, authenticator and federation controls structured.

By the end of the weekend you will have
✓  An adopt-ready control for all 18 requirements
✓  A completed control matrix
✓  The evidence an assessor examines
✓  Your core controls in place
✓  A readiness percentage and a fix list
✓  The highest-risk gaps closed

Common questions

Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.

Does it cover modern password guidance? Yes. Long passphrases, breach screening and avoiding forced rotation are built as a control.

Does it cover MFA and phishing resistance? Yes. Meeting the authenticator assurance level, including phishing-resistant MFA where required, is built as a control.

What if it is not for me? A 30-day money-back guarantee.

Do not face an assessor with requirements you cannot show.
Every requirement is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and be ready this weekend.

Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com