2017 Federal Identity Forum & Homeland Security

Changes in Multi-Factor Authentication Regulation: US and Abroad (Room 146 B)

13 Sep 17
3:15 PM - 4:15 PM

Tracks: Federal Identity Forum, Track D - Strategies & Policies

Across the globe, regulators and policymakers are waking up to the fact that inadequate authentication approaches are one of the most exploited attack vectors in cyberspace.  Indeed, it is hard to find a major breach over the last 5 years that was not tied to a weak or compromised credential.  Moreover, the threat is continuing to evolve - with some first-generation multi-factor authentication (MFA) solutions such as OTP now increasingly vulnerable to phishing attacks and other compromises. 
 
This session will explore how regulators both in the US and abroad are creating new policies and updating old ones to account for the threat posed by inadequate authentication controls.  It will explore how different governments are looking at this issue, as well as the ways in which they are crafting policies that balance security, privacy and user experience.