Skip to content

Identity Verification

What is Identity Verification?

The process of confirming that an individual's claimed identity matches their actual identity through document checks, biometric comparison, or other methods.

Information Security

Each of these is named in at least one of the same controls as identity verification. The number is how many controls name both.

What the standards actually require on identity verification

Requirements naming identity verification across 6 standards, quoted from the control text.

To establish the s 28(2) matters the entity must: for an individual, take reasonable steps to establish the customer is who they claim to be;

amlctf-act-2006-australia::28(3) · Identity verification, customer risk rating and risk-based KYC collection and verification →

Healthcare recipients are registered and their identity verified before access to their My Health Record is provided (Part 3 Div 1).

MYHR-REG-2 · Healthcare recipient registration and identity verification →

Users provide sufficient evidence to verify their identity when requesting new credentials.

ISM-1593 · Identity verification before issuing credentials →

Banks must have risk-based procedures for verifying the identity of each customer within a reasonable time after account opening, using documents, non-documentary methods, or a combination (31 CFR 1020.220(a)(2)).

BSA-CIP-2 · Identity Verification →

The suitability process may be an AusCheck background check; where the CIRMP permits one it must assess the information in paragraphs 5(a) to (d) of the AusCheck Act, the criteria are the criminal history criteria (whether the person has a CIRMP criminal recor...

critical-infrastructure-risk-management-program-cirmp-rules-2023::9(2) · s 9(2) AusCheck background checks where the CIRMP uses them: criminal history criteria, dual identity verification, notification, Secretary's advice →

Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →

Questions people ask about identity verification

What is Identity Verification?
The process of confirming that an individual's claimed identity matches their actual identity through document checks, biometric comparison, or other methods.
Why is Identity Verification important for compliance?
Identity Verification is a key concept in Information Security. Understanding identity verification helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Identity Verification?
Identity Verification appears in the requirement text of AML/CTF Act 2006 (Australia), Australia My Health Records Act 2012, Australian Information Security Manual, Bank Secrecy Act / Anti-Money Laundering (BSA/AML), Critical Infrastructure Risk Management Program (CIRMP) Rules 2023. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Identity Verification?
Explore our compliance framework pages to see how identity verification applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Identity Verification applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.