Evidence validation and verification

[paul-grassi]

(From IRS)

A couple things to think about as you consider what the clarification is:

In reality, virtually no agency will perform KBV on a FAIR piece of evidence. KBV would be used in the Verification stage. But, we are only required to verify against the strongest piece of evidence. For IAL, that must be STRONG. For IAL 1, NO verification is needed. To Validate fair, all you have to do is confirm an attribute match (name, account number). So, you might be able to demonstrate some of those things in table 5-1 (per your email below), if you did KBV, but there is seemingly no reason to indicated in the spec to do KBV. The effective result, is that for FAIR the applicant just needs knowledge of the evidence (not possession (pic) or a way to verify).

There is lots of opportunity to conflate the source document and information on a document as evidence. Most people are going to think of the evidence as something like credit card, social security card, bank statement – not as information on a credit card . So when you throw in requirements like those in Table 5-1 that say: “• Where the evidence includes physical security features, it requires proprietary knowledge to be able to reproduce it,” Practitioners are going to ask themselves, are there security features on the credit card? Even, though they don’t need to pay attention to that if they just collect the info on a credit card as evidence.