TREASURY ENTERPRISE 

AUTHENTICATION SERVICE (TEAS)

DIGITAL IDENTITY RISK 

ASSESSMENT (DIRA) DIGITAL 

IDENTITY ACCEPTANCE 

STATEMENT (DIAS) FORM

September 2023

United States Department of the Treasury | Office of the Chief Information Officer
TEAS DIRA DIAS Form 2 September 2023

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Introduction 

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-63 

Revision 3, Digital Identity Guidelines, outlines guidance for Relying Parties (RPs), 

Service Providers (SPs) or Application Line-of-Business (LOB) Owners to perform 

digital identity risk assessments. 

The purpose of this document is to summarize results of your service or application’s 

Digital Identity Risk Assessment (DIRA) into a Digital Identity Acceptance Statement 

(DIAS). Instructions to complete the DIAS can found in the TEICAM DIRA Guidance. 

Section 1: Application Demographic Information 

DIRA DIAS Demographic Information

Bureau

Application Name

Application URL

Date of this Request

Target Integration Date

Points of Contact (POC)

Primary POC

Name

Title

Email Address

Phone

Technical POCs

Name(s)

Email Addresses

Continue to the following pages to complete the Use Case Tables for each of your application or

service’s use cases.
3

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Section 2: DIRA DIAS Use Case Tables 

Complete Use Case Tables for each Use Case identified in Table 1 of the DIRA Guide.

Use Case 1

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
4

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 2

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
5

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 3

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
6

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 4

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
7

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 5

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
8

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 6

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
9

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 7

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
10

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 8

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
11

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 9

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Continue to the next Use Case Table for additional entries. Otherwise, digitally sign the final page.

TEAS DIRA DIAS Form September 2023
12

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Use Case 10

Use Case Description

Describe the User(s)

Describe the

Transaction(s)

Required Entitlements

Impact Categories

(1) Inconvenience, distress, or damage to standing or reputation None, High, Moderate, Low

(2) Financial loss or agency liability None, High, Moderate, Low

(3) Harm to agency programs or public interests None, High, Moderate, Low

(4) Unauthorized release of sensitive information None, High, Moderate, Low

(5) Personal safety None, High, Moderate, Low

(6) Civil or criminal violations None, High, Moderate, Low

IAL Assessment

Do you need validated Personal Information of your Users? If No, then IAL1 – If yes, continue

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

AAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you making personal data accessible? If Yes, then IAL2 – If no, IAL1

FAL Assessment

Do you assess “High” for any Impact Categories? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 5? If Yes, then IAL3 – If no, continue

Do you assess “Moderate” for Impact Category 1, 2, 3, 4, or 6? If Yes, then IAL2 – If no, continue

Do you assess “Low” for Impact Category 3, 4, 5, or 6? If Yes, then IAL2 – If no, continue

Are you passing personal information in the assertion? If Yes, then IAL2 – If no, continue

Are you using front channel assertion presentation?* If Yes, then IAL2 – Else, IAL1

Assurance Level Rating Summary

IAL IAL1,IAL2,IAL3 AAL AAL1,AAL2,AAL3 FAL FAL1,FAL2,FAL3

*See Definitions in Appendix C in the DIRA Guide

Next: Digitally sign the final page.

TEAS DIRA DIAS Form September 2023
13

For Official Use Only 

United States Department of the Treasury | Office of the Chief Information Officer

Section 3: Digital Signature 

Please provide the Authorized Signer Information and digitally sign the document.

Authorized Signer Information

Name

Title

Agency

Bureau

Email Address

Phone Number

Digital Signature

Please send the finalized, digitally signed DIRA DIAS Form to 

_DL_TEICAMSSOFederation@treasury.gov. 

TEAS DIRA DIAS Form September 2023