scope:

This Recommendation proposes a general guideline for security countermeasures, from both technical and managerial perspectives, that would allow for the protection of biometric information against various threats, such as hijacking, modification and illegal access, from the point of its creation to its disposal in a telecommunications environment. Also this Recommendation proposes countermeasures for the protection of biometric systems as related to their operational procedures, as well as the roles and responsibilities of personnel involved in system design. From a technical point of view, this Recommendation proposes several countermeasures to ensure data integrity, mutual authentication, and confidentiality. From a managerial perspective, this Recommendation describes countermeasures that allow for the protection of biometric devices as related to their installation, removal, and delivery.

Not in the scope of this Recommendation is defining security requirements for biometric data and biometric security algorithms.