TechKnowSurge

NIST 800-53 IA-12 NIST CSF PR.AA-02 ISC2 CISSP 5.2 CompTIA Security+ 4.6

VideoSecurityFree

Identity Proofing

Identity proofing is the process of verifying a user's identity through official documentation before granting access to a service or system. Unlike open account registration, identity proofing requires legal proof of identity such as a government-issued ID or supporting records.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

Access to digital services falls into two broad categories: systems that accept self-reported information at registration, and systems that require users to prove their identity before access is granted. The distinction matters because self-reported information can be inaccurate or fraudulent, while identity-proofed systems establish a verified link between a real-world individual and their account. Identity proofing is the formal process by which that verification occurs, typically involving the submission of government-issued identification, official records, or other legally recognized documentation. Common examples include applying for a travel visa, accessing benefits tied to military service, or registering with financial or government platforms subject to compliance requirements. In these cases, the registration workflow extends beyond filling out a form to include document upload, review, and confirmation that the submitted materials match the claimed identity. The goal is to establish a higher level of assurance that the person creating an account is, in fact, who they say they are, reducing the risk of fraud, impersonation, and unauthorized access to sensitive services or information.

What you'll learn

Explain the concept of identity proofing and describe scenarios in which it is required to verify a user's identity before granting access to services

What's covered

Identity Proofing

Account Access Types
- Simple Sign Up
  - Gmail Example
- Proof Required
  - Veteran Card Example
  - Visa Application Example
Identity Proofing Defined
- Prove Identity Legally
- Required Documentation
  - Federal ID
  - Driver's License
Identity Proofing Process
- Create System Account
- Upload Proof Documents

Aligned to

NIST 800-53

IA-12 Identity Proofing

NIST CSF

PR.AA-02 Identities are proofed and bound to credentials based on the context of interactions.

ISC2 CISSP

5.2 Design identification and authentication strategy

CompTIA Security+

4.6 Given a scenario, implement and maintain identity and access management.

Key terms

Identity Proofing: The process of verifying a user's identity in a legally recognized manner, typically by submitting official documentation such as a government-issued ID, before granting access to a service.
Authentication: The process of verifying the identity of a user, device, or system.
Access Control: A security mechanism that restricts access to resources based on policies, roles, or identity.
Identity and Access Management: A framework of policies and technologies that ensures the right users have appropriate access to resources.

Topics

Identity Proofing Identity And Access Management Authentication Cybersecurity User Verification Access Control

Transcript

In some cases we can just sign up for an account and then we have access to services, but in other cases we may need to prove who we are before we have access to those services.

Proving Who You Are

As an example, when I signed up to get my veteran card, I had to prove that I was in the military, so I had to turn over a bunch of ID information and also some forms.

If I wanted to create a Gmail account, all I'd do is visit the Gmail site and then I could set up an account. I could tell them who I was, and I could be lying or not lying, and they would just set it up for me and then I would get that account. But there are some services that I need to prove who I am for. For instance, when I did some international travel, I went to a site to get a visa, and what they required me to do is prove who I am. I had to upload some documents, some federal IDs, to show that I was in fact who I said I was.

Identity Proofing

Well, this is called identity proofing. Identity proofing is when you have to prove who you are in some sort of legal fashion. Maybe it's producing some sort of documentation, maybe it's like a federal ID or a driver's license or something along those lines. The process usually goes where you have to set up some sort of account on the system, and then upload some sort of documentation to prove who you are.

Read the full transcript Show less

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →