Page 978 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 978
higher CERs.
FIGURE 13.1 Graph of FRR and FAR errors indicating the CER point
It’s not necessary, and often not desirable, to operate a device with the
sensitivity set at the CER level. For example, an organization may use
a facial recognition system to allow or deny access to a secure area
because they want to ensure that unauthorized individuals are never
granted access. In this case, the organization would set the sensitivity
very high so there is very little chance of a false acceptance (false
positive). This may result in more false rejections (false negatives), but
a false rejection is more acceptable than a false acceptance in this
scenario.
Biometric Registration

