What it means
Proofing may involve authoritative evidence, validation, verification, fraud checks, in-person or remote processes, and decisions about the assurance needed for the service and risk.
Why it matters
Authentication protects an account after enrollment, but weak proofing can place a strong authenticator in the hands of the wrong person.
Practical focus
- Match proofing rigor to risk and consequence
- Validate evidence and verify the applicant
- Protect proofing data and minimize unnecessary collection
- Provide secure exception, recovery, and redress processes
Common mistakes
- Treating a knowledge-based question as strong proof
- Collecting more identity data than the service needs
- Ignoring synthetic identity and document fraud
- Using account recovery that bypasses original assurance
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: