The role of the Chief Information Security Officer (CISO) has notably changed since the COVID-19 pandemic. According to Dale Heath, Technology Lead at Rubrik A/NZ, “A holistic security approach – combining infrastructure, cloud and data security (or end-to-end Zero Trust security) – is required to help keep an organisation safe.”  “This means bringing together prevention, detection and investigation as well as ensuring data resilience, data observability and data recovery.”  The next plan of action is to go passwordless. The industry is on the cusp of replacing passwords and legacy Multi-Factor Authentication (MFA) methods with modern open authentication standards, like FIDO2. These standards will enable widespread adoption of phishing-resistant and usable security, and hopefully, will be able to help CISOs to eradicate an entire class of issues that have long been associated with passwords.


More

POLITICO: Oregon Senator Ron Wyden Calls for Social Security Administration to Adopt FIDO Authentication

VIA POLITICO Morning Cybersecurity Report 10/6/17 NOW THAT’S WHAT I’M TOKEN ABOUT — The Social…

Read More →

SC Magazine: Mnuchin hails FIDO authentication standards

While speaking at the Federal Identity Forum & Exposition, Treasury Secretary Steve Mnuchin called out…

Read More →

The Economist: Where are the flaws in two-factor authentication?

The Economist reports that two-factor authentication methods using SMS or OTPs are flawed, and that…

Read More →