Vendor rated thresholds and values are primarily lab driven within a clean environment using a known set of source and target images. However, in a real-world scenario and varying environmental conditions, those values and levels are likely not realistic. Finding the actual FAR and FRR values for your biometric process is an essential operational gauge to understand your environmental thresholds and security levels. This tuning or learning phase requires an in-depth knowledge of the biometric software deployed, target audience variables, environmental variables as well as platform review and audit.
Testing the biometric security controls of your system for spoof detection and liveliness detection is an vital audit to be done. Vendors tend to demonstrate spoof detection and liveliness detection tests that are beneficial to their product and may not be adequate for your specific use case. These tests should be conducted with real-world applications that apply to your specific use case and likelihood of occurrence and repeated from time to time to ensure system changes have not affected the effectiveness of those security controls.
Independent validation of these values provides the appropriate risk mitigation to ensure you are not solely relying on vendor values. Only an independent third-party review can validate the system settings and capabilities.