NASA Procedural Requirements

NPR 2841.1 Effective Date: January 06, 2011 Expiration Date: January 06, 2027

Subject: Identity, Credential, and Access Management (Revalidated w/change 2)

Responsible Office: Office of the Chief Information Officer

Change History

Table of Contents

Preface

P.1 Purpose
P.2 Applicability
P.3 Authority
P.4 Applicable Documents and Forms
P.5 Measurement/Verification
P.6 Cancellation

Chapter 1. Description of Identity, Credential, and Access Management Services

1.1 Identity Management
1.2 Credential Management
1.3 Access Management

Chapter 2. Responsibility

2.1 Agency Chief Information Officer
2.2 Agency Assistant Administrator for Protective Services
2.3 ICAM Business Process Leads
2.4 ICAM Service Managers

Chapter 3. Requirements

3.1 ICAM Service Managers
3.2 Center Protective Services Personnel
3.3 Registration Authorities
3.4 Identity Sponsors
3.5 Access Sponsors
3.6 Information System Owners
3.7 Information Owners
3.8 Physical Asset Owners
3.9 Group Managers
3.10 Systems and Applications
3.11 Legacy and Special Purpose ICAM Service Providers
3.12 Federated Identity Providers and Credential Service Providers
3.13 End Users

Appendix A. Definitions

Appendix B. Acronyms

Appendix C. Additional References

DISTRIBUTION:
NODIS

This document does not bind the public, except as authorized by law or as incorporated into a contract. This document is uncontrolled when printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: https://nodis3.gsfc.nasa.gov.