Page 978 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 978

higher CERs.



















































               FIGURE 13.1 Graph of FRR and FAR errors indicating the CER point


               It’s not necessary, and often not desirable, to operate a device with the
               sensitivity set at the CER level. For example, an organization may use
               a facial recognition system to allow or deny access to a secure area
               because they want to ensure that unauthorized individuals are never
               granted access. In this case, the organization would set the sensitivity
               very high so there is very little chance of a false acceptance (false

               positive). This may result in more false rejections (false negatives), but
               a false rejection is more acceptable than a false acceptance in this
               scenario.


               Biometric Registration
   973   974   975   976   977   978   979   980   981   982   983