Attachment 2- Compliance Requirements.pdf
PDF 160 KB Posted
- Attached to
- Biometric Capture Device GWAC
- Solicitation number
- 70RDA126R00000001
About this file
This is an attachment listing compliance requirements and standards for biometric capture devices used in federal contracting.
The document specifies mandatory compliance standards across three biometric technology categories: Fingerprint, Facial Recognition, and Iris capture devices. For fingerprint devices, contractors must comply with the Electronic Biometric Transmission Standard (EBTS) Version 11.X with FBI CJIS Image Quality Specifications, ANSI/NIST-ITL 2-2008 (updated 2015) for Type-4 and Type-14 fingerprints, DHS Policy Directive 4300A for IT system security, IEC 60529 for ingress protection ratings, FIPS 140-2 for cryptographic module security, DoD Instruction 8500.01 for cybersecurity, and NIST SP 800-39 for information security risk management. Facial recognition devices must adhere to IXM 6.0.9 Biometric Standards Requirements for US-VISIT, FBI EBTS Version 10.0.8 and Version 11.2 Final, DoD EBTS Version 4.1, ANSI/NIST-ITL 2-2008 Type-10 image requirements, and the same DHS, FIPS, DoD, and NIST security standards applicable to fingerprint devices. Iris capture devices must comply with ANSI/NIST-ITL 1-2011 (updated 2015) Type 17 data format specifications, ISO/IEC 19794-6:2011 for iris image data, NIST Iris Exchange (IREX-X) standards, ANSI/IESNA RP27.1-96 for photobiological safety, IEC 60825-1.2-2001, and the same DHS, FIPS, DoD, and NIST security standards. All three biometric categories share common security and cybersecurity compliance requirements established by federal agencies including DHS, DoD, FBI, and NIST.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Government Responses to Vendor Questions.xlsx | XLSX spreadsheet | |
| Amendment - Request for Proposal -70RDA126R00000001.docx | DOCX document | |
| Amendment - Attachment 3B - Face.xlsx | XLSX spreadsheet | |
| Amendment - Attachment 3D - Palmprint.xlsx | XLSX spreadsheet | |
| Amendment - ATTACHMENT 3 Minimum Essential Requirements.docx | DOCX document | |
| Attachment 6 - Biometric Capture Device Questionnaire.pdf | ||
| Attachment 5- Quarterly Contractor Data Report Template.xlsx | XLSX spreadsheet | |
| Attachment 3E- Multi-modal.xlsx | XLSX spreadsheet | |
| Attachment 3B - Face.xlsx | XLSX spreadsheet | |
| SF 1449- 70RDA126R00000001.pdf | ||
| Attachment 4 - List of Acronyms.pdf | ||
| Attachment 1 - Pricing Worksheet.xlsx | XLSX spreadsheet | |
| Request for Proposal 70RDA126R00000001.pdf | ||
| Attachment 3- Minimum Essential Requirements.pdf | ||
| Attachment 3D - Palmprint.xlsx | XLSX spreadsheet | |
| Attachment 3C - Iris.xlsx | XLSX spreadsheet | |
| Attachment 3A - Fingerprint .xlsx | XLSX spreadsheet |
Show all 17
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
ATTACHMENT 2: Compliance Requirements This attachment lists compliance documents relevant to Fingerprint, Facial Recognition, and Iris biometric capture devices.
Fingerprint:
• Electronic Biometric Transmission Standard (EBTS)(11.X), Appendix F, FBI CJIS Image Quality Specifications, April 16, https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKE wimrvvJ_8SGAxXkElkFHV6XCv4QFnoECAYQAQ&url=https%3A%2F%2Ffbibiospe cs.fbi.gov%2Ffile-repository%2Fmaster-ebts-v11-0.pdf&usg=AOvVaw2Aejyo- IaGyFBW4vAWknBN&opi=89978449.
• ANSI/NIST-ITL 2-2008, update 2015, requirements for Type-4 and Type-14 fingerprints, https://www.nist.gov/itl/iad/image-group/ansinist-itl-standard-references
• DHS Policy Directive 4300A: Information Technology System Security Program Sensitive Systems, Version 13.3 February 13, 2023, https://usdhs.sharepoint.com/sites/dhsconnect/org/comp/mgmt/ocio/ciso/Pages/sspolicy.a spx.
• International Electrotechnical Commission (IEC) 60529: Ingres Protection Ratings, August 29, 2013, https://www.iec.ch/ip-ratings.
• Federal Information Processing Standard (FIPS) 140-2, Security Requirements for Cryptographic Modules, May 25, 2001, https://csrc.nist.gov/pubs/fips/140-2/upd2/final.
• DoD Instruction 8500.01, Cybersecurity, September 27,2018, https://public.cyber.mil/policy-guidance/dodi-8500-01/.
• NIST SP 800-39, Managing Information Security Risk: Organization, Mission, and Information System View, March 2011, https://csrc.nist.gov/pubs/sp/800/39/final.
Facial Recognition:
• IXM 6.0.9 Biometric Standards Requirements for US-VISIT, Version 1.0, March 15, 2020, https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKE wiVz4GphsWGAxXyF1kFHRwFDSIQFnoECBEQAQ&url=https%3A%2F%2Fwww.dh s.gov%2Fxlibrary%2Fassets%2Fusvisit%2Fusvisit_biometric_standards.pdf&usg=AOv Vaw16GoAOReErG8oHemSvZRJy&opi=89978449.
• FBI EBTS 10.0.8, Electronic Biometric Transmission Specification(EBTS) Version 10.0.8, September 30, 2017, https://fbibiospecs.fbi.gov/file-repository/ebts-version-10-0- 8-xml-iepd.zip/view.
• DoD EBTS 4.1 Department of Defense Electronic Biometric Transmission Specification Version 4.1, April 2019, https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact= 8&ved=2ahUKEwi- 8dHsiMWGAxUFEFkFHXjnBDAQFnoECAYQAQ&url=https%3A%2F%2Fwww.dfba.
mil%2Ffunctions%2Flibrary%2Fstandards_docs%2FDoD%2520EBTS%2520v4.1.pdf& usg=AOvVaw3senne8ACnnh3PY0q5QmJs&opi=89978449.
• ANSI/NIST-ITL 2-2008, update 2015, requirements for Type-10 Images. See Finger.
• International Electrotechnical Commission (IEC) standard 60529. See Finger.
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwimrvvJ_8SGAxXkElkFHV6XCv4QFnoECAYQAQ&url=https%3A%2F%2Ffbibiospecs.fbi.gov%2Ffile-repository%2Fmaster-ebts-v11-0.pdf&usg=AOvVaw2Aejyo-IaGyFBW4vAWknBN&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwimrvvJ_8SGAxXkElkFHV6XCv4QFnoECAYQAQ&url=https%3A%2F%2Ffbibiospecs.fbi.gov%2Ffile-repository%2Fmaster-ebts-v11-0.pdf&usg=AOvVaw2Aejyo-IaGyFBW4vAWknBN&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwimrvvJ_8SGAxXkElkFHV6XCv4QFnoECAYQAQ&url=https%3A%2F%2Ffbibiospecs.fbi.gov%2Ffile-repository%2Fmaster-ebts-v11-0.pdf&usg=AOvVaw2Aejyo-IaGyFBW4vAWknBN&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwimrvvJ_8SGAxXkElkFHV6XCv4QFnoECAYQAQ&url=https%3A%2F%2Ffbibiospecs.fbi.gov%2Ffile-repository%2Fmaster-ebts-v11-0.pdf&usg=AOvVaw2Aejyo-IaGyFBW4vAWknBN&opi=89978449 https://www.nist.gov/itl/iad/image-group/ansinist-itl-standard-references https://www.iec.ch/ip-ratings https://csrc.nist.gov/pubs/fips/140-2/upd2/final https://public.cyber.mil/policy-guidance/dodi-8500-01/ https://csrc.nist.gov/pubs/sp/800/39/final https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiVz4GphsWGAxXyF1kFHRwFDSIQFnoECBEQAQ&url=https%3A%2F%2Fwww.dhs.gov%2Fxlibrary%2Fassets%2Fusvisit%2Fusvisit_biometric_standards.pdf&usg=AOvVaw16GoAOReErG8oHemSvZRJy&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiVz4GphsWGAxXyF1kFHRwFDSIQFnoECBEQAQ&url=https%3A%2F%2Fwww.dhs.gov%2Fxlibrary%2Fassets%2Fusvisit%2Fusvisit_biometric_standards.pdf&usg=AOvVaw16GoAOReErG8oHemSvZRJy&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiVz4GphsWGAxXyF1kFHRwFDSIQFnoECBEQAQ&url=https%3A%2F%2Fwww.dhs.gov%2Fxlibrary%2Fassets%2Fusvisit%2Fusvisit_biometric_standards.pdf&usg=AOvVaw16GoAOReErG8oHemSvZRJy&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiVz4GphsWGAxXyF1kFHRwFDSIQFnoECBEQAQ&url=https%3A%2F%2Fwww.dhs.gov%2Fxlibrary%2Fassets%2Fusvisit%2Fusvisit_biometric_standards.pdf&usg=AOvVaw16GoAOReErG8oHemSvZRJy&opi=89978449 https://fbibiospecs.fbi.gov/file-repository/ebts-version-10-0-8-xml-iepd.zip/view https://fbibiospecs.fbi.gov/file-repository/ebts-version-10-0-8-xml-iepd.zip/view https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwi-8dHsiMWGAxUFEFkFHXjnBDAQFnoECAYQAQ&url=https%3A%2F%2Fwww.dfba.mil%2Ffunctions%2Flibrary%2Fstandards_docs%2FDoD%2520EBTS%2520v4.1.pdf&usg=AOvVaw3senne8ACnnh3PY0q5QmJs&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwi-8dHsiMWGAxUFEFkFHXjnBDAQFnoECAYQAQ&url=https%3A%2F%2Fwww.dfba.mil%2Ffunctions%2Flibrary%2Fstandards_docs%2FDoD%2520EBTS%2520v4.1.pdf&usg=AOvVaw3senne8ACnnh3PY0q5QmJs&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwi-8dHsiMWGAxUFEFkFHXjnBDAQFnoECAYQAQ&url=https%3A%2F%2Fwww.dfba.mil%2Ffunctions%2Flibrary%2Fstandards_docs%2FDoD%2520EBTS%2520v4.1.pdf&usg=AOvVaw3senne8ACnnh3PY0q5QmJs&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwi-8dHsiMWGAxUFEFkFHXjnBDAQFnoECAYQAQ&url=https%3A%2F%2Fwww.dfba.mil%2Ffunctions%2Flibrary%2Fstandards_docs%2FDoD%2520EBTS%2520v4.1.pdf&usg=AOvVaw3senne8ACnnh3PY0q5QmJs&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwi-8dHsiMWGAxUFEFkFHXjnBDAQFnoECAYQAQ&url=https%3A%2F%2Fwww.dfba.mil%2Ffunctions%2Flibrary%2Fstandards_docs%2FDoD%2520EBTS%2520v4.1.pdf&usg=AOvVaw3senne8ACnnh3PY0q5QmJs&opi=89978449
• DHS 4300A (see above).
• FIPS140-2 (See above).
• DoDI 8500.01 Cybersecurity (See above).
• NIST SP 800-39, Managing Information Security Risk: Organization, Mission, and
Information System View, March 2011, https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKE wiqhqn-icWGAxXDFFkFHS6zDL0QFnoECAYQAQ&url=https%3A%2F%2Fcsrc.nist.gov%2F pubs%2Fsp%2F800%2F39%2Ffinal&usg=AOvVaw0zycsMfO9sHgd7RBayY7n2&opi= 89978449.
• FBI EBTS Version 11.2 Final, September 20, 2023, https://fbibiospecs.fbi.gov/ebts- 1/approved-ebts.
IRIS:
• ANSI/NIST-ITL 1-2011 update 2015, Type 17, Data Format for the Interchange of Fingerprint, Facial, Scar Mark& Tattoo (SMT) Information, August 21, 2016, https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKE wjvvI7WisWGAxVkGFkFHfw7JqgQFnoECBMQAQ&url=https%3A%2F%2Fschengen -it-systems.ec.europa.eu%2Fglossary%2Fansinist-itl-1-2011-update-2015-standard&usg=AOvVaw1_FNwon7iNQR2iIt70G4R-&opi=89978449.
• ISO/IEC 19794-6: 2011, Part 6 Iris Image Data, October 2011, https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact= 8&ved=2ahUKEwiM0urNi8WGAxULMlkFHXRpEYAQFnoECBQQAQ&url=https%3 A%2F%2Fwww.iso.org%2Fstandard%2F50868.html&usg=AOvVaw0SX4MDJJotEEflh M0UXzxC&opi=89978449.
• NIST Iris Exchange (IREX-X), April 12, 2024, IREX 10: Identification Track (nist.gov).
• ANSI/IESNA RP27.l-96 (Photobiological Safety of Lamps and Lighting Systems).
• IEC 60825-1.2-2001.
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiqhqn-icWGAxXDFFkFHS6zDL0QFnoECAYQAQ&url=https%3A%2F%2Fcsrc.nist.gov%2Fpubs%2Fsp%2F800%2F39%2Ffinal&usg=AOvVaw0zycsMfO9sHgd7RBayY7n2&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiqhqn-icWGAxXDFFkFHS6zDL0QFnoECAYQAQ&url=https%3A%2F%2Fcsrc.nist.gov%2Fpubs%2Fsp%2F800%2F39%2Ffinal&usg=AOvVaw0zycsMfO9sHgd7RBayY7n2&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiqhqn-icWGAxXDFFkFHS6zDL0QFnoECAYQAQ&url=https%3A%2F%2Fcsrc.nist.gov%2Fpubs%2Fsp%2F800%2F39%2Ffinal&usg=AOvVaw0zycsMfO9sHgd7RBayY7n2&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiqhqn-icWGAxXDFFkFHS6zDL0QFnoECAYQAQ&url=https%3A%2F%2Fcsrc.nist.gov%2Fpubs%2Fsp%2F800%2F39%2Ffinal&usg=AOvVaw0zycsMfO9sHgd7RBayY7n2&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiqhqn-icWGAxXDFFkFHS6zDL0QFnoECAYQAQ&url=https%3A%2F%2Fcsrc.nist.gov%2Fpubs%2Fsp%2F800%2F39%2Ffinal&usg=AOvVaw0zycsMfO9sHgd7RBayY7n2&opi=89978449 https://fbibiospecs.fbi.gov/ebts-1/approved-ebts https://fbibiospecs.fbi.gov/ebts-1/approved-ebts https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjvvI7WisWGAxVkGFkFHfw7JqgQFnoECBMQAQ&url=https%3A%2F%2Fschengen-it-systems.ec.europa.eu%2Fglossary%2Fansinist-itl-1-2011-update-2015-standard&usg=AOvVaw1_FNwon7iNQR2iIt70G4R-&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjvvI7WisWGAxVkGFkFHfw7JqgQFnoECBMQAQ&url=https%3A%2F%2Fschengen-it-systems.ec.europa.eu%2Fglossary%2Fansinist-itl-1-2011-update-2015-standard&usg=AOvVaw1_FNwon7iNQR2iIt70G4R-&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjvvI7WisWGAxVkGFkFHfw7JqgQFnoECBMQAQ&url=https%3A%2F%2Fschengen-it-systems.ec.europa.eu%2Fglossary%2Fansinist-itl-1-2011-update-2015-standard&usg=AOvVaw1_FNwon7iNQR2iIt70G4R-&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjvvI7WisWGAxVkGFkFHfw7JqgQFnoECBMQAQ&url=https%3A%2F%2Fschengen-it-systems.ec.europa.eu%2Fglossary%2Fansinist-itl-1-2011-update-2015-standard&usg=AOvVaw1_FNwon7iNQR2iIt70G4R-&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiM0urNi8WGAxULMlkFHXRpEYAQFnoECBQQAQ&url=https%3A%2F%2Fwww.iso.org%2Fstandard%2F50868.html&usg=AOvVaw0SX4MDJJotEEflhM0UXzxC&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiM0urNi8WGAxULMlkFHXRpEYAQFnoECBQQAQ&url=https%3A%2F%2Fwww.iso.org%2Fstandard%2F50868.html&usg=AOvVaw0SX4MDJJotEEflhM0UXzxC&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiM0urNi8WGAxULMlkFHXRpEYAQFnoECBQQAQ&url=https%3A%2F%2Fwww.iso.org%2Fstandard%2F50868.html&usg=AOvVaw0SX4MDJJotEEflhM0UXzxC&opi=89978449 https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiM0urNi8WGAxULMlkFHXRpEYAQFnoECBQQAQ&url=https%3A%2F%2Fwww.iso.org%2Fstandard%2F50868.html&usg=AOvVaw0SX4MDJJotEEflhM0UXzxC&opi=89978449 https://pages.nist.gov/IREX10/
ATTACHMENT 2: Compliance Requirements
File details come from the government source that posted it. Updated .