Historically passwords have been the go-to method to secure information systems. However, as time has passed, they’ve become harder to memorize, create a lot of pain for IT to maintain, and are a significant source of daily frustration for billions of people. Remember this: Colonial Pipeline Cyber Attack: Hackers Used Compromised Password, or even CVS Health Faces Data Breach, 1B Search…
It’s a staple of the Mission Impossible franchise – Tom Cruise and his crew use advanced latex 3D face masks to impersonate someone else and enter a building, vault, or other restricted areas. This used to appear so futuristic and truly only the stuff of Hollywood movies. Tom and his crew were giving us all a glimpse at what an impersonation attack…
When I recently applied for a new credit card, the issuing bank sent me a letter to verify my identity first. The options were to either visit one of their branches to show my ID, mail in a copy of my ID, or provide a recent utility statement. Not wanting to take time out of my day to visit a…
As summer turns to fall, our world is settling into the rhythms of life under COVID-19, preparing for another season of sweatpants, existential dread, and peanut butter cups for lunch. The drumbeat of COVID life also involves skyrocketing rates of digital interaction, with all the privacy implications that go along with it. As an enterprise information security professional, you can’t…
On May 21, 2019, OMB issued a new cybersecurity memorandum, M-19-17 – Enabling Mission Delivery through Improved Identity, Credential, and Access Management, setting forth a modernized policy for the federal government’s approach to Identity, Credential, and Access Management (ICAM). This long-awaited memo represents a major overhaul of federal identity policy and strategically points agencies to the risk-based approach detailed in…