Digital Identity Risk Assessment Playbook

This playbook is a method to apply the National Institute of Standards and Technology (NIST) Special Publication 800-63-3 Digital Identity Guidelines. Federal agencies can perform a Digital Identity Risk Assessment (DIRA) to determine the appropriate identity, authenticator, or federation level outlined to access an application. While this playbook was written for U.S. Federal Agencies, it can be tailored to fit any organization.