GSA outlines four e-authentication assurance levels

The General Services Administration will require agencies to adopt one of four assurance levels for electronic authorization for all e-government projects and major IT systems that conduct transactions by the end of fiscal 2004.GSA, which will release its proposed policy in tomorrow’s Federal Register, asks agencies to perform risk assessments on the 25 Quicksilver e-government projects by Oct. 1 and all major systems by Sept. 15, 2004, to determine which assurance levels would be appropriate. GSA said most of the already have finished their risk assessments and determined the level of assurance they need.Using e-authentication will help agencies establish confidence in both the identities of users and the authenticity of data in transactions with government information systems, GSA said.In addition to the proposed policy, the National Institute of Standards and Technology will publish technical recommendations to help agencies determine the technologies they need to meet the assurance levels, the notice said.GSA detailed assurance levels as:Agency business owners should consider “all direct and indirect consequences” when assessing risks based on the four assurance levels, GSA said.