08-16-2017, 10:56 PM
BIOMETRICS SECURITY TECHNICAL IMPLEMENTATION GUIDE
[attachment=16284]
Historically, biometrics has been relegated to a single method (fingerprinting). However, in the
last two to three years, new biometric methods and technologies have been developed that lower
cost and increase usability. Companies developing new methods number in the hundreds and
their methods continue to evolve as the technology advances. The availability, effectiveness, and
affordability of biometric technology continues to progress as the demand for authentication has
increased. This increased interest is driven by an exploding problem with identity theft and
computer fraud coupled with the increased use of remote connectivity methods, such as, Internet
access.
1.2 Authority
DOD Directive 8500.1 requires that all IA and IA-enabled IT products incorporated into DOD
information systems shall be configured in accordance with DOD-approved security
configuration guidelines and tasks DISA to develop and provide security configuration
guidance for IA and IA-enabled IT products in coordination with Director, NSA. This
document is provided under the authority of DOD Directive 8500.1.
1.3 Scope
This document is a requirement for all DOD administered systems and all systems connected to
DOD networks. These requirements are designed to assist Security Managers (SMs),
Information Assurance Managers (IAMs), Information Assurance Officers (IAOs), and System
Administrators (SAs) with configuring and maintaining security controls.
1.4 Writing Conventions
Throughout this document, statements are written using words such as will and should. The
following paragraphs are intended to clarify how these STIG statements are to be interpreted.