Identity and access management products

APAC cyber security landscape to be more tumultuous in 2019

Amid growing cyber threats, the Asia-Pacific cyber security landscape will not get any rosier in 2019 unless organisations start shoring up their cyber hygiene Continue Reading

By

• Aaron Tan, TechTarget

Have your Christmas Presents vanished from your doorstep?

So far only one of the presents we have ordered on-line this year failed to arrive - more than one e-mails telling us of delivery slots arrived after the parcel. It was therefore only chance that ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Mobile security needs a rethink for the 5G era

A report released through the government’s 5G Testbeds and Trials programme has recommended the UK rethink its mobile security strategy Continue Reading

By

• Alex Scroxton, Security Editor

Australia passes controversial encryption law

Arguments continue over law that requires companies to work with government agencies to ensure that encrypted communications can be read if a crime is suspected Continue Reading

By

• Beverley Head

Machine identity protection development gets funding boost

Cyber security firm Venafi has launched a development fund aimed at accelerating the delivery of protection for machine identities Continue Reading

By

• Warwick Ashford, Senior analyst

Manchester’s evolution from rag trade to digital hub

In this week’s Computer Weekly, we visit Manchester to examine the city’s expanding digital and e-commerce industry and find out the key to tech sector growth in the former home of the UK rag trade. We look at the challenges of IT security in the quantum computing age. And we talk to Bloomberg’s CTO about tech innovation, machine learning and blockchain. Read the issue now. Continue Reading

O2 outage highlights importance of software certificate audits

A major outage on the O2 4G mobile network was caused by an expired certificate and could easily have been avoided, it has emerged Continue Reading

By

• Alex Scroxton, Security Editor

Liberty heads for judicial review over Investigatory Powers Act

The UK's powers to conduct supsicionless bulk surveillance on individuals and organisations face a legal challenge in the high court next year Continue Reading

By

• Bill Goodwin, Computer Weekly

Digital identity market welcomes plan to hand Gov.uk Verify to private sector

Players in the UK digital identity community welcome the clarity over the future of Verify, but question marks remain over prospects for government ID system Continue Reading

By

• Bryan Glick, Editor in chief

Brexit and digital identity – avoiding future restrictions on digital trade

The UK has been a major contributor to European efforts to establish cross-border digital identities. Governments need to ensure that Brexit does not introduce unwanted restrictions that harm digital trade Continue Reading

By

• Gillan Ward, ID Crowd

Interview: Roger Taylor, chair, Centre for Data Ethics and Innovation

Chair of the new Centre for Data Ethics and Innovation says collaboration is vital for developing effective frameworks to manage the proliferation of AI and data-driven technologies Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

IT sector advises Swedish government on elections and voting system

 Continue Reading

How voice biometrics catches fraudsters

Telephone banking is often seen as the forgotten channel in multi-channel banking, something that fraudsters are now exploiting Continue Reading

By

• Cliff Saran, Managing Editor

Credit card fraud in ANZ showing no signs of abating

The value of fraudulent transactions more than doubled that of legitimate purchases during the third quarter this year Continue Reading

By

• Beverley Head

It’s complicated: How enterprises are approaching IAM challenges

Identity and access management challenges are evolving with digital transformation. Computer Weekly explores some of the ways organisations are ensuring the right people gain the right access to the right resources Continue Reading

By

• Christian Annesley

Zero-trust security not an off-the-shelf product

The zero-trust security model is a business enabler that needs to be supported by a strategy and security architecture, analyst warns cyber security leaders Continue Reading

By

• Warwick Ashford, Senior analyst

Thailand’s Democrat Party holds election with blockchain

The Zcoin blockchain was used to store file hashes of voting data and identities of voting members of Thailand’s main opposition party Continue Reading

By

• Aaron Tan, TechTarget

User behaviour analytics adding new insight

User behaviour analytics is helping to add new insights by providing the missing element in security event information management approaches, says Martin Kuppinger Continue Reading

By

• Warwick Ashford, Senior analyst

Norway’s IT industry must tackle security vulnerabilities

Report reveals growing threat posed by “hostile foreign actors” against Norway’s IT systems and critical national infrastructure Continue Reading

By

• Gerard O'Dwyer

Australia needs better cloud and data management capabilities

Use of cloud services is soaring in Australia, but a lack of cloud management skills is holding back enterprises from reaping the full benefits of the technology Continue Reading

By

• Beverley Head

Banking sector leading CIAM innovation, say Big Four

Maturity in consumer identity and access management (CIAM) differs from sector to sector, with the banking sector taking the lead in terms of innovation, according to the Big Four accounting firms Continue Reading

By

• Warwick Ashford, Senior analyst

UK Post Office looks to enable reusable digital ID

The UK Post Office is investigating the possibility of enabling UK citizens to re-use their passport data for other applications where digital identity is a key component Continue Reading

By

• Warwick Ashford, Senior analyst

Aim for long-term customer identity relationship

Consumer identity management can deliver competitive advantage, but only if businesses follow some golden rules, says KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Where next for digital identity?

In this week’s Computer Weekly, as the UK government hands its digital identity service, Gov.uk Verify, to the private sector, we examine the history and prospects for the troubled system. Our latest buyer’s guide looks at cloud-native architecture. And we compare the flash storage capabilities of the leading cloud providers, AWS, Azure and Google. Read the issue now. Continue Reading

Centralised identity risky and not web 3.0 friendly, says entrepreneur

User controlled identity is less risky than centralised identity and essential for the next evolution of the web, according to an entrepreneur and evangelist of self-sovereign identity and blockchain technologies Continue Reading

By

• Warwick Ashford, Senior analyst

McAfee CTO raises concerns about election cyber security

The security industry needs to look at the security of election processes around the world as well as the security of voting and counting machines, says McAfee CTO Continue Reading

By

• Warwick Ashford, Senior analyst

'Sealed cloud' promises better data security

TÜV SÜD’s Singapore Sealed Cloud does not grant administrators access to data, reducing the possibility of hackers breaking into databases using compromised administrator credentials Continue Reading

By

• Aaron Tan, TechTarget

APAC security spending tipped to reach new highs

Security services will be the largest and fastest-growing slice of the overall security pie in the Asia-Pacific region Continue Reading

By

• Aaron Tan, TechTarget

AI is no silver bullet for cyber security

A security expert has called for businesses to manage the risks of adopting new technologies and improve their cyber hygiene, rather than see artificial intelligence as a panacea for their security woes Continue Reading

By

• Aaron Tan, TechTarget

The troublesome saga of Gov.uk Verify

As the government plans to hand over its flagship identity assurance programme to the private sector, Computer Weekly looks at the history of the troubled project and how Gov.uk Verify ended up on the chopping board Continue Reading

By

• Lis Evenstad

Optus to acquire Hivint in cyber security deal

The deal is expected to bolster the telco’s security pedigree in a market that is grappling with more data breaches and cyber incidents Continue Reading

By

• Aaron Tan, TechTarget

GDS must share the lessons of Verify - good and bad - to boost the digital identity ecosystem

Depending on your perspective, Gov.uk Verify is now either secure in its future at the heart of the UK’s emerging digital identity ecosystem, or it has one foot in the grave and is on the way to ... Continue Reading

By

• Bryan Glick, Editor in chief

Singapore extends reach of digital ID system with cloud

GovTech is using AWS to host a developer platform that enables government agencies and businesses to develop services that build on the upcoming National Digital Identity system Continue Reading

By

• Ai Lei Tao

Government to end investment in Gov.uk Verify digital identity system

Cabinet Office announces 18-month transition to hand troubled identity assurance programme over to private sector Continue Reading

By

• Bryan Glick, Editor in chief

Blockchain is no ‘magic wand’ for cyber security

The decentralised nature of blockchain networks may deter some cyber crooks, but ASEAN organisations still need to pay heed to the security of their blockchain infrastructure Continue Reading

By

• Aaron Tan, TechTarget

Norwegian state discusses vulnerabilities with IT sector

Government is collaborating with the country’s IT industry to improve the availability of security expertise Continue Reading

By

• Gerard O'Dwyer

DCMS plan aims to open up digital identity market - and might kill off Gov.uk Verify

The Department for Digital, Culture, Media and Sport (DCMS) has been conducting a review of digital identity since taking over policy responsibility from the Government Digital Service (GDS) in ... Continue Reading

By

• Bryan Glick, Editor in chief

Equifax fined by ICO for security failings

The Information Commissioners Office has fined Equifax UK in relation to a data breach at its UK parent last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Europol cyber crime report highlights emerging threats to enterprise security

Research highlights increase in sophistication of ransomware attacks, while revealing details of new and emerging threats to enterprises Continue Reading

By

• Tasmin Lockwood

IT sector advises Swedish government on elections and voting system

Swedish IT secure is helping the government make election systems more secure and reduce external influence Continue Reading

By

• Gerard O'Dwyer

Cutting through the blockchain hype

Blockchain adoption is still in its infancy, with security challenges standing in the way of more widespread deployment, according to a blockchain expert Continue Reading

By

• Aaron Tan, TechTarget

Two-thirds of emails not clean, says research

Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber criminals outspend businesses in cyber security battle

Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Verify on the verge – what does it mean for GDS?

The government’s flagship digital identity system Gov.uk Verify has become a car crash in motion, accelerating towards its demise. The Cabinet Office’s project watchdog has condemned Verify by ... Continue Reading

By

• Bryan Glick, Editor in chief

Government projects watchdog recommends terminating Gov.uk Verify identity project

Infrastructure & Projects Authority says Whitehall departments are unwilling to fund flagship GDS identity programme – cancellation would mean writing off at least £130m spent so far Continue Reading

By

• Bryan Glick, Editor in chief

Three forthcoming government services to use Gov.uk Verify

Government Digital Service is in the process of private beta testing its identity assurance platform with three new central government services Continue Reading

By

• Lis Evenstad

Machine identity management crisis looming

Managing machine identities is looming as the next big security challenge, a study reveals, with few organisations capable of protecting them as they increasingly form the basis of online communications Continue Reading

By

• Warwick Ashford, Senior analyst

Fourth man jailed for iCloud celebrity hacking

The final hacker charged with leaking nude images of female celebrities in 2014 has been jailed Continue Reading

By

• Warwick Ashford, Senior analyst

Gov.uk Verify chief to leave Government Digital Service

Nic Harrison is returning to the Department for Work and Pensions, with no replacement as leader of the identity assurance programme yet in place Continue Reading

By

• Bryan Glick, Editor in chief

NHS trusts lose nearly 10,000 patient records a year

Report calls for NHS trusts to work to abolish handwritten notes in hospitals to prevent loss of personal documents and to introduce a patient identity protocol Continue Reading

By

• Warwick Ashford, Senior analyst

Global infosec spending to top $114bn in 2018, says Gartner

The need for improved detection, response and privacy is driving the demand for security products and services in response to security risks, business needs and industry changes, Gartner reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Scotland's Improvement Service signs up to pilot digital identity platform

The Improvement Service will pilot the Yoti digital identity platform, test the use of blockchain applications and take a cloud first approach with its myaccount citizen portal Continue Reading

By

• Lis Evenstad

The National Archives deploys Egress to support FoI requests

Egress Secure Workspace is being used by the Advisory Council for The National Archives, who require a collaboration environment to assess FoI requests Continue Reading

By

• Cliff Saran, Managing Editor

Phishing remains top fraud enabler, RSA reports

Phishing is the most popular way of enabling fraud for cyber criminals, who are also increasingly using rogue mobile apps, mobile browsers and social media, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

NCR patches ATM vulnerabilities

NCR has patched ATM vulnerabilities discovered by Positive Technologies Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR harmonised with local laws in Nordic EU states

Sweden provides an interesting challenge for the European Union’s data protection regulation due to its laws around freedom of press and free speech Continue Reading

By

• Gerard O'Dwyer

Australia’s health sector reports most data breaches again

In the first full quarter since Australia’s mandatory breach disclosure scheme came into effect, healthcare providers reported the most data breaches amid controversy over the national health record system Continue Reading

By

• Beverley Head

Digital identity system for EU nationals should be used for all UK citizens, says report

Policy Exchange report recommends extending Home Office system for registering EU nationals post-Brexit to become UK-wide digital identity application Continue Reading

By

• Bryan Glick, Editor in chief

Singapore public healthcare sector limits internet use

Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system Continue Reading

By

• Aaron Tan, TechTarget

Zero trust security model boosts business confidence

Organisations that combine the zero trust security model with next-gen access are more confident about meeting access control challenges, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

How Splunk is ‘splunking’ data for APAC enterprises

Splunk’s regional vice-president talks up the company’s business strategy and how its customers are using big data analytics in security and IT operations Continue Reading

By

• Aaron Tan, TechTarget

Deloitte launches EMEA-wide initiative to close cyber security gender gap

Professional services organisation Deloitte expands its UK efforts to encourage more women into cyber security to cover the EMEA area Continue Reading

By

• Clare McDonald, Business Editor

An insider’s look into the dark web

A principal research scientist at Sophos offers a glimpse into the abysses of the dark web in a bid to uncover what cyber crooks are up to Continue Reading

By

• Aaron Tan, TechTarget

A third of organisations do not have a security expert, survey shows

Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Cracking the code – what makes a good password?

In light of the fact complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Ramsés Gallego, Isaca

Corporate networks vulnerable to insider attacks, report finds

Researchers found that 100% of corporate networks tested in 2017 were vulnerable to insider attacks, with Wi-Fi networks and employees among the top areas of weakness Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Some basic password guidelines

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Petra Wenham

Tackling the digital identity problem

In this week’s Computer Weekly, as UK government attempts to create a digital identity standard flounder, we examine progress on establishing the online ID system the digital economy needs. Barclays Bank talks about its move to DevOps and public cloud with Amazon Web Services. And we find out how using AI and chatbots could help improve IT service management. Read the issue now. Continue Reading

Security Think Tank: Passwords alone are not good enough

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Security Think Tank: Firms need to support good password practices

In the light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Mike Gillespie

Security Think Tank: How to create good passwords and add security layers

In light of the fact complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password - and when is a password alone not enough? Continue Reading

By

• Simon Persin, Turnkey Consulting

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, TechTarget

Norway’s National Security Agency warns IT industry about security obligations

IT service providers serving organisations in Norway have received a timely reminder about their security obligations. Continue Reading

By

• Gerard O'Dwyer

Singapore faced cyber attacks during Trump-Kim summit

Russian attackers allegedly scanned IP phones in the city-state for vulnerabilities, although it was unclear what they were after or whether they were successful Continue Reading

By

• Aaron Tan, TechTarget

The next moves by DCMS on data and digital identity must lay foundations for UK's digital economy

Matt Hancock, the secretary of state for digital, culture, media and sport (DCMS), is not everyone’s cup of tea – especially when that cup is Matt Hancock branded. But regardless of whether you’re ... Continue Reading

By

• Bryan Glick, Editor in chief

Encryption is under attack, says Venafi CEO Jeff Hudson

Encryption is one of the fundamental principles on which the internet is built, but this vital technology is under threat from criminals and ill-advised government policies, says Venafi CEO Jeff Hudson Continue Reading

By

• Peter Ray Allison

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

By

• Beverley Head

GDS loses digital identity policy to DCMS

The move follows DCMS taking over data policy from GDS and means Cabinet Office is no longer responsible for relations with private sector ID ecosystem Continue Reading

By

• Bryan Glick, Editor in chief

Scotland to begin building identity platform prototype this autumn

Scottish government plans flexible approach to online identity providers as it aims to launch alpha phase of is online identity assurance programme in August 2018 Continue Reading

By

• Lis Evenstad

Cyber resilience key to securing industrial control systems

Operators of industrial control systems can build greater cyber resilience by getting IT and operational technology teams to work more closely together and improving the visibility of their infrastructure, among other security measures Continue Reading

By

• Aaron Tan, TechTarget

Identity and access management tools add AI, microservices

AI and as-a-service platforms enable IT to take a more hands-off approach. But with adoption in the early stages, most IT pros wonder what the future holds for identity management. Continue Reading

By

• Erica Mixon

Grab outlines its approach to cyber security

Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement Continue Reading

By

• Aaron Tan, TechTarget

CW Nordics: Finland delays e-voting plan

Security concerns have re-emerged to further frustrate the Finnish government’s plans to launch a national e-voting system. Also read about a study by the Stockholm School of Economics that looks at the likely impact of AI, machine learning and robotics on people’s lives. And find out why Norway has accelerated plans to scale up its national cyber security infrastructure. Continue Reading

England and Wales Cricket Board to improve players’ medical data

Cricketers’ medical images will be stored securely in an independent clinical archive, enabling clinicians to access medical data and make treatment decisions more quickly Continue Reading

By

• Lis Evenstad

Digital identity: Is the puzzle about to be solved?

Solving the digital identity problem is key to the future of the digital economy as a whole – but how close are we? Computer Weekly looks at what is happening with Gov.uk Verify, private sector involvement, and lessons the UK could learn from other countries Continue Reading

By

• Lis Evenstad

UK government promises laws to police 'Wild West Internet'

UK government plans laws to make online activity safer after green paper reveals more needs to be done to protect citizens Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to get new digital visa service

The Home Office has signed up to a deal with Sopra Steria for a visa service allowing people to use biometrics and digital files as part of their application Continue Reading

By

• Lis Evenstad

NHS England on the cusp of launching first citizen identity pilot

The NHS will begin trialling its identity verification system with a non-clinical service shortly, with 20 other services in the pipeline, according to NHS England chief digital officer Juliet Bauer Continue Reading

By

• Lis Evenstad

GDS aims for path of least embarrassment as it shifts strategy on Gov.uk Verify

Last week, the Government Digital Service (GDS) dedicated a whole day to talking about what it’s up to, at its first Sprint event in two years. About time too, many observers said, since GDS seemed ... Continue Reading

By

• Bryan Glick, Editor in chief

SMEs more worried about GDPR’s threat to reputation than fines

SMEs are more worried about the damage GDPR non compliance will do to their reputations than their wallets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch Tax Authority not fully GDPR-compliant as deadline approaches

The Netherlands’ Department of Finance warns that not all aspects of the EU privacy law will be implemented by the 25 May deadline Continue Reading

By

• Tijs Hofmans

No2ID and the Empire Windrush

The "scandal" concerning the "Windrush Generation" appears to be collateral damage from the failure to agree coherent policies for sharing public sector identities and personal information after ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Account takeover up tenfold in past year

The incidence of online account takeover and the proportion of high-risk account access attempts underlines the need for improved authentication, says fraud detection firm Continue Reading

By

• Warwick Ashford, Senior analyst

Why Windrush scandal demonstrates the importance of technology to political decision-making

The Windrush scandal has revealed many disturbing things about government policy that have nothing to do with IT. But the issues raised amply demonstrate the importance of technology considerations ... Continue Reading

By

• Bryan Glick, Editor in chief

Mastercard calls for global online payments standard

Mastercard and its EMV partners are pushing for online payments standards similar to those for point-of-sale payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Interview: GDPR will give Dutch privacy watchdog its teeth

The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading

By

• Tijs Hofmans

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster Continue Reading

By

• Aaron Tan, TechTarget

Home Office issues guidance on tech to prevent identity fraud

Advice highlights the benefits of using identity document validation to audit and share data on fraudulent documents Continue Reading

By

• Lis Evenstad