Term · 28. International Regulations
DIRM DIRM
Definition
Digital Identity Risk Management — the NIST SP 800-63-4 process for managing digital identity risk. Replaces the static checklist approach of SP 800-63-3 with a dynamic, risk-based selection of identity assurance levels (IAL / AAL / FAL) driven by the threat model, operating environment, and the impact of identity failures. Spans identity proofing, authentication, and federation decisions.
- Synonyms
-
- Digital Identity Risk Management
- Discouraged variants
-
- **NIST SP 800-63-4**
- Application
- Regulatory: NIST SP 800-63 (Digital Identity Guidelines)
- Standards & regulations
-
- NIST
Related terms
-
FAL (FAL)
NIST SP 800-63C Federation Assurance Level — measures the strength of federated identity assertions between identity pro …
-
Remediation (Rem)
Action taken to correct an identified identity risk or policy violation — disable orphan account, revoke excessive entit …
-
AAL (AAL)
NIST SP 800-63B Authenticator Assurance Level — measures the robustness of the authentication process. AAL1: single-fact …
-
Audit Trail
Chronological record of identity events — authentication, authorization decisions, provisioning actions, configuration c …
-
Automated Data Classification
Machine learning-driven discovery and classification of sensitive data across structured and unstructured stores — ident …
-
Cloud Data Access Governance
Discovery, classification, and access control for sensitive data across cloud data stores (S3, Snowflake, BigQuery, Data …