// Security
NIST SP 800-63 Digital Identity Guidelines Compliance Software
NIST guidelines for identity proofing, authentication and federation assurance.
Framework at a glance
Short name
NIST 800-63
Version
rev3
Category
Security
Controls
26
What NIST 800-63 covers
26 controls across 4 domains — every one tracked, owned and evidenced in Cyber Horizon.
SP 800-63 - Digital Identity Risk Management
3 controls- 63-1 Digital Identity Risk Management
- 63-2 Selection of Assurance Levels
- 63-3 Continuous Evaluation and Redress
SP 800-63A - Identity Proofing and Enrolment
7 controls- 63A-1 Identity Assurance Level 1 (IAL1)
- 63A-2 Identity Assurance Level 2 (IAL2)
- 63A-3 Identity Assurance Level 3 (IAL3)
- 63A-4 Resolution, Validation and Verification
- 63A-5 Identity Evidence and Attribute Collection
SP 800-63B - Authentication and Lifecycle Management
9 controls- 63B-1 Authenticator Assurance Level 1 (AAL1)
- 63B-2 Authenticator Assurance Level 2 (AAL2)
- 63B-3 Authenticator Assurance Level 3 (AAL3)
- 63B-4 Authenticator Types
- 63B-5 Memorized Secret Requirements
SP 800-63C - Federation and Assertions
7 controls- 63C-1 Federation Assurance Level 1 (FAL1)
- 63C-2 Federation Assurance Level 2 (FAL2)
- 63C-3 Federation Assurance Level 3 (FAL3)
- 63C-4 Assertion Protection
- 63C-5 Trust Agreements and Federation Relationships
How Cyber Horizon automates NIST 800-63
Every NIST 800-63 control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is NIST SP 800-63 Digital Identity Guidelines?
NIST guidelines for identity proofing, authentication and federation assurance.
How many controls does NIST SP 800-63 Digital Identity Guidelines have?
NIST SP 800-63 Digital Identity Guidelines (rev3) has 26 controls in Cyber Horizon's catalogue, organised across 4 domains.
How does Cyber Horizon help with NIST SP 800-63 Digital Identity Guidelines?
Cyber Horizon maps NIST SP 800-63 Digital Identity Guidelines into a shared control library alongside every other framework you run, so evidence collected once counts towards NIST 800-63 and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Security frameworks
See NIST 800-63 mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of NIST 800-63 in Cyber Horizon.