NIST Cybersecurity Professional®
NCSP® 800-63 Foundation Certificate
 
Build Strong Digital Identity Assurance with NIST SP 800‑63

NIST Cybersecurity Professional®

NCSP® 800-63 Foundation Certificate

​

Course Description

​

Digital identity is now the front line of cybersecurity. Organisations must verify users securely, protect accounts from compromise, and deliver frictionless access across modern digital services. NIST SP 800‑63 provides the authoritative guidance for identity proofing, authentication, federation, and lifecycle management, forming the foundation of identity‑centric security and Zero Trust architectures.

The NCSP® 800‑63 Foundation Certificate is a 2‑day, instructor‑led course introducing participants to the concepts, models, and assurance requirements defined in the NIST SP 800‑63 Digital Identity Guidelines, including Identity Assurance Levels (IAL), Authentication Assurance Levels (AAL), and Federation Assurance Levels (FAL).

This course teaches how to design, implement, and assess digital identity systems aligned with NIST SP 800‑63, and how these practices support NIST CSF 2.0, Zero Trust, and enterprise identity governance programs.

 

What You Will Learn

 

Participants gain foundational knowledge required to apply NIST SP 800‑63 concepts across identity‑centric systems and services. You will learn:

• How NIST SP 800‑63 supports NIST CSF 2.0, Zero Trust, and enterprise identity governance.

• The structure, terminology, and assurance models defined in NIST SP 800‑63‑3.

• How to apply Identity Assurance Levels (IAL), Authentication Assurance Levels (AAL), and Federation Assurance Levels (FAL).

• How to evaluate identity proofing, enrolment, and authentication processes.

• How to integrate secure authentication technologies, MFA, and credential lifecycle management.

• How to design digital identity systems that reduce fraud, strengthen trust, and improve user experience.

​​

Course Agenda

 

Day 1: Digital Identity Foundations & Assurance Models

Module 1: Introduction to NIST SP 800‑63

• Overview of the Digital Identity Guidelines, their structure, and alignment with NIST CSF 2.0 and Zero Trust.

Module 2: Core Digital Identity Concepts

• Key concepts including identity proofing, enrolment, credential lifecycle, and digital identity risks.

Module 3: Identity Assurance Levels (IAL)

• Requirements and application of IAL1–IAL3 for identity proofing and evidence validation.

Module 4: Authentication Assurance Levels (AAL)

• Requirements and application of AAL1–AAL3, including MFA and secure authenticator selection.

 

Day 2: Federation, Architecture & Operational Integration

Module 5: Federation Assurance Levels (FAL)

• Requirements and application of FAL1–FAL3 for secure federation, assertions, and trust frameworks.

Module 6: Designing Identity‑Centric Architectures

• Integrating 800‑63 guidance into Zero Trust, credential management, and identity governance.

Module 7: Implementing Secure Authentication

• Applying secure authentication methods, adaptive controls, and balancing security with user experience.

Module 8: Continuous Improvement & Compliance

• Monitoring, assessing, and maintaining assurance levels to support audits, risk management, and CSF outcomes.

​

Learning Outcomes

​

Participants will be able to:

• Explain how NIST SP 800‑63 supports NIST CSF 2.0, Zero Trust, and identity‑centric security.

• Identify and describe the assurance models (IAL, AAL, FAL) and their requirements.

• Apply identity proofing, authentication, and federation concepts to real‑world systems.

• Integrate digital identity controls into enterprise architectures and security programs.

• Evaluate identity systems for assurance, usability, and resilience.

• Translate NIST guidance into actionable practices that strengthen digital trust.

​

Who Should Attend?

​

This course is designed for professionals responsible for designing, implementing, or managing digital identity systems, including:

• Identity & Access Management (IAM) Professionals

• Cybersecurity Architects & Engineers

• Zero Trust & Identity Governance Teams

• Risk Management & Compliance Personnel

• Software Developers & DevSecOps Teams

• System Integrators & Technology Vendors

• Program & Project Managers overseeing identity services

​

Prerequisites

 

There are no formal prerequisites for this Foundation‑level course, though a basic understanding of cybersecurity concepts and the NIST CSF is recommended.

 

Participants are provided with:

• NIST Cybersecurity Professional® (NCSP®) 800-63 Foundation Certificate courseware including links to further reading and resources.

• NIST Cybersecurity Professional® (NCSP®) 800-63 Foundation Certificate, Certificate of Completion.

• NIST Cybersecurity Professional® (NCSP®) 800-63 Foundation Certificate digital badge.

​

​