Identity and access management products

Where next for digital identity?

In this week’s Computer Weekly, as the UK government hands its digital identity service, Gov.uk Verify, to the private sector, we examine the history and prospects for the troubled system. Our latest buyer’s guide looks at cloud-native architecture. And we compare the flash storage capabilities of the leading cloud providers, AWS, Azure and Google. Read the issue now. Continue Reading

Centralised identity risky and not web 3.0 friendly, says entrepreneur

User controlled identity is less risky than centralised identity and essential for the next evolution of the web, according to an entrepreneur and evangelist of self-sovereign identity and blockchain technologies Continue Reading

By

• Warwick Ashford, Senior analyst

McAfee CTO raises concerns about election cyber security

The security industry needs to look at the security of election processes around the world as well as the security of voting and counting machines, says McAfee CTO Continue Reading

By

• Warwick Ashford, Senior analyst

'Sealed cloud' promises better data security

TÜV SÜD’s Singapore Sealed Cloud does not grant administrators access to data, reducing the possibility of hackers breaking into databases using compromised administrator credentials Continue Reading

By

• Aaron Tan, TechTarget

APAC security spending tipped to reach new highs

Security services will be the largest and fastest-growing slice of the overall security pie in the Asia-Pacific region Continue Reading

By

• Aaron Tan, TechTarget

AI is no silver bullet for cyber security

A security expert has called for businesses to manage the risks of adopting new technologies and improve their cyber hygiene, rather than see artificial intelligence as a panacea for their security woes Continue Reading

By

• Aaron Tan, TechTarget

The troublesome saga of Gov.uk Verify

As the government plans to hand over its flagship identity assurance programme to the private sector, Computer Weekly looks at the history of the troubled project and how Gov.uk Verify ended up on the chopping board Continue Reading

By

• Lis Evenstad

Optus to acquire Hivint in cyber security deal

The deal is expected to bolster the telco’s security pedigree in a market that is grappling with more data breaches and cyber incidents Continue Reading

By

• Aaron Tan, TechTarget

GDS must share the lessons of Verify - good and bad - to boost the digital identity ecosystem

Depending on your perspective, Gov.uk Verify is now either secure in its future at the heart of the UK’s emerging digital identity ecosystem, or it has one foot in the grave and is on the way to ... Continue Reading

By

• Bryan Glick, Editor in chief

Singapore extends reach of digital ID system with cloud

GovTech is using AWS to host a developer platform that enables government agencies and businesses to develop services that build on the upcoming National Digital Identity system Continue Reading

By

• Ai Lei Tao

Government to end investment in Gov.uk Verify digital identity system

Cabinet Office announces 18-month transition to hand troubled identity assurance programme over to private sector Continue Reading

By

• Bryan Glick, Editor in chief

Blockchain is no ‘magic wand’ for cyber security

The decentralised nature of blockchain networks may deter some cyber crooks, but ASEAN organisations still need to pay heed to the security of their blockchain infrastructure Continue Reading

By

• Aaron Tan, TechTarget

Norwegian state discusses vulnerabilities with IT sector

Government is collaborating with the country’s IT industry to improve the availability of security expertise Continue Reading

By

• Gerard O'Dwyer

DCMS plan aims to open up digital identity market - and might kill off Gov.uk Verify

The Department for Digital, Culture, Media and Sport (DCMS) has been conducting a review of digital identity since taking over policy responsibility from the Government Digital Service (GDS) in ... Continue Reading

By

• Bryan Glick, Editor in chief

Equifax fined by ICO for security failings

The Information Commissioners Office has fined Equifax UK in relation to a data breach at its UK parent last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Europol cyber crime report highlights emerging threats to enterprise security

Research highlights increase in sophistication of ransomware attacks, while revealing details of new and emerging threats to enterprises Continue Reading

By

• Tasmin Lockwood

IT sector advises Swedish government on elections and voting system

Swedish IT secure is helping the government make election systems more secure and reduce external influence Continue Reading

By

• Gerard O'Dwyer

Cutting through the blockchain hype

Blockchain adoption is still in its infancy, with security challenges standing in the way of more widespread deployment, according to a blockchain expert Continue Reading

By

• Aaron Tan, TechTarget

Two-thirds of emails not clean, says research

Two-thirds of emails don't make it to the inbox because security systems consider them unsafe, according to research Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cyber criminals outspend businesses in cyber security battle

Cybercriminals are flexing their financial might and UK organisations are facing more attacks as a result Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Verify on the verge – what does it mean for GDS?

The government’s flagship digital identity system Gov.uk Verify has become a car crash in motion, accelerating towards its demise. The Cabinet Office’s project watchdog has condemned Verify by ... Continue Reading

By

• Bryan Glick, Editor in chief

Government projects watchdog recommends terminating Gov.uk Verify identity project

Infrastructure & Projects Authority says Whitehall departments are unwilling to fund flagship GDS identity programme – cancellation would mean writing off at least £130m spent so far Continue Reading

By

• Bryan Glick, Editor in chief

Three forthcoming government services to use Gov.uk Verify

Government Digital Service is in the process of private beta testing its identity assurance platform with three new central government services Continue Reading

By

• Lis Evenstad

Machine identity management crisis looming

Managing machine identities is looming as the next big security challenge, a study reveals, with few organisations capable of protecting them as they increasingly form the basis of online communications Continue Reading

By

• Warwick Ashford, Senior analyst

Fourth man jailed for iCloud celebrity hacking

The final hacker charged with leaking nude images of female celebrities in 2014 has been jailed Continue Reading

By

• Warwick Ashford, Senior analyst

Gov.uk Verify chief to leave Government Digital Service

Nic Harrison is returning to the Department for Work and Pensions, with no replacement as leader of the identity assurance programme yet in place Continue Reading

By

• Bryan Glick, Editor in chief

NHS trusts lose nearly 10,000 patient records a year

Report calls for NHS trusts to work to abolish handwritten notes in hospitals to prevent loss of personal documents and to introduce a patient identity protocol Continue Reading

By

• Warwick Ashford, Senior analyst

Global infosec spending to top $114bn in 2018, says Gartner

The need for improved detection, response and privacy is driving the demand for security products and services in response to security risks, business needs and industry changes, Gartner reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Scotland's Improvement Service signs up to pilot digital identity platform

The Improvement Service will pilot the Yoti digital identity platform, test the use of blockchain applications and take a cloud first approach with its myaccount citizen portal Continue Reading

By

• Lis Evenstad

The National Archives deploys Egress to support FoI requests

Egress Secure Workspace is being used by the Advisory Council for The National Archives, who require a collaboration environment to assess FoI requests Continue Reading

By

• Cliff Saran, Managing Editor

Phishing remains top fraud enabler, RSA reports

Phishing is the most popular way of enabling fraud for cyber criminals, who are also increasingly using rogue mobile apps, mobile browsers and social media, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

NCR patches ATM vulnerabilities

NCR has patched ATM vulnerabilities discovered by Positive Technologies Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR harmonised with local laws in Nordic EU states

Sweden provides an interesting challenge for the European Union’s data protection regulation due to its laws around freedom of press and free speech Continue Reading

By

• Gerard O'Dwyer

Australia’s health sector reports most data breaches again

In the first full quarter since Australia’s mandatory breach disclosure scheme came into effect, healthcare providers reported the most data breaches amid controversy over the national health record system Continue Reading

By

• Beverley Head

Digital identity system for EU nationals should be used for all UK citizens, says report

Policy Exchange report recommends extending Home Office system for registering EU nationals post-Brexit to become UK-wide digital identity application Continue Reading

By

• Bryan Glick, Editor in chief

Singapore public healthcare sector limits internet use

Healthcare workers who require internet access will have to use separate internet workstations following an unprecedented attack on Singapore’s public healthcare system Continue Reading

By

• Aaron Tan, TechTarget

Zero trust security model boosts business confidence

Organisations that combine the zero trust security model with next-gen access are more confident about meeting access control challenges, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

How Splunk is ‘splunking’ data for APAC enterprises

Splunk’s regional vice-president talks up the company’s business strategy and how its customers are using big data analytics in security and IT operations Continue Reading

By

• Aaron Tan, TechTarget

Deloitte launches EMEA-wide initiative to close cyber security gender gap

Professional services organisation Deloitte expands its UK efforts to encourage more women into cyber security to cover the EMEA area Continue Reading

By

• Clare McDonald, Business Editor

An insider’s look into the dark web

A principal research scientist at Sophos offers a glimpse into the abysses of the dark web in a bid to uncover what cyber crooks are up to Continue Reading

By

• Aaron Tan, TechTarget

A third of organisations do not have a security expert, survey shows

Around a third of organisations are vulnerable to cyber attacks due to a lack of dedicated in-house cyber security experts, finds Gartner survey Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Security Think Tank: Cracking the code – what makes a good password?

In light of the fact complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Ramsés Gallego, Isaca

Corporate networks vulnerable to insider attacks, report finds

Researchers found that 100% of corporate networks tested in 2017 were vulnerable to insider attacks, with Wi-Fi networks and employees among the top areas of weakness Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Some basic password guidelines

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Petra Wenham

Tackling the digital identity problem

In this week’s Computer Weekly, as UK government attempts to create a digital identity standard flounder, we examine progress on establishing the online ID system the digital economy needs. Barclays Bank talks about its move to DevOps and public cloud with Amazon Web Services. And we find out how using AI and chatbots could help improve IT service management. Read the issue now. Continue Reading

Security Think Tank: Passwords alone are not good enough

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Security Think Tank: Firms need to support good password practices

In the light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Mike Gillespie

Security Think Tank: How to create good passwords and add security layers

In light of the fact complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password - and when is a password alone not enough? Continue Reading

By

• Simon Persin, Turnkey Consulting

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, TechTarget

Norway’s National Security Agency warns IT industry about security obligations

IT service providers serving organisations in Norway have received a timely reminder about their security obligations. Continue Reading

By

• Gerard O'Dwyer

Singapore faced cyber attacks during Trump-Kim summit

Russian attackers allegedly scanned IP phones in the city-state for vulnerabilities, although it was unclear what they were after or whether they were successful Continue Reading

By

• Aaron Tan, TechTarget

The next moves by DCMS on data and digital identity must lay foundations for UK's digital economy

Matt Hancock, the secretary of state for digital, culture, media and sport (DCMS), is not everyone’s cup of tea – especially when that cup is Matt Hancock branded. But regardless of whether you’re ... Continue Reading

By

• Bryan Glick, Editor in chief

Encryption is under attack, says Venafi CEO Jeff Hudson

Encryption is one of the fundamental principles on which the internet is built, but this vital technology is under threat from criminals and ill-advised government policies, says Venafi CEO Jeff Hudson Continue Reading

By

• Peter Ray Allison

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

By

• Beverley Head

GDS loses digital identity policy to DCMS

The move follows DCMS taking over data policy from GDS and means Cabinet Office is no longer responsible for relations with private sector ID ecosystem Continue Reading

By

• Bryan Glick, Editor in chief

Scotland to begin building identity platform prototype this autumn

Scottish government plans flexible approach to online identity providers as it aims to launch alpha phase of is online identity assurance programme in August 2018 Continue Reading

By

• Lis Evenstad

Cyber resilience key to securing industrial control systems

Operators of industrial control systems can build greater cyber resilience by getting IT and operational technology teams to work more closely together and improving the visibility of their infrastructure, among other security measures Continue Reading

By

• Aaron Tan, TechTarget

Identity and access management tools add AI, microservices

AI and as-a-service platforms enable IT to take a more hands-off approach. But with adoption in the early stages, most IT pros wonder what the future holds for identity management. Continue Reading

By

• Erica Mixon

Grab outlines its approach to cyber security

Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement Continue Reading

By

• Aaron Tan, TechTarget

CW Nordics: Finland delays e-voting plan

Security concerns have re-emerged to further frustrate the Finnish government’s plans to launch a national e-voting system. Also read about a study by the Stockholm School of Economics that looks at the likely impact of AI, machine learning and robotics on people’s lives. And find out why Norway has accelerated plans to scale up its national cyber security infrastructure. Continue Reading

England and Wales Cricket Board to improve players’ medical data

Cricketers’ medical images will be stored securely in an independent clinical archive, enabling clinicians to access medical data and make treatment decisions more quickly Continue Reading

By

• Lis Evenstad

Digital identity: Is the puzzle about to be solved?

Solving the digital identity problem is key to the future of the digital economy as a whole – but how close are we? Computer Weekly looks at what is happening with Gov.uk Verify, private sector involvement, and lessons the UK could learn from other countries Continue Reading

By

• Lis Evenstad

UK government promises laws to police 'Wild West Internet'

UK government plans laws to make online activity safer after green paper reveals more needs to be done to protect citizens Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to get new digital visa service

The Home Office has signed up to a deal with Sopra Steria for a visa service allowing people to use biometrics and digital files as part of their application Continue Reading

By

• Lis Evenstad

NHS England on the cusp of launching first citizen identity pilot

The NHS will begin trialling its identity verification system with a non-clinical service shortly, with 20 other services in the pipeline, according to NHS England chief digital officer Juliet Bauer Continue Reading

By

• Lis Evenstad

GDS aims for path of least embarrassment as it shifts strategy on Gov.uk Verify

Last week, the Government Digital Service (GDS) dedicated a whole day to talking about what it’s up to, at its first Sprint event in two years. About time too, many observers said, since GDS seemed ... Continue Reading

By

• Bryan Glick, Editor in chief

What to know before implementing an IAM system

IT administrators have many features to choose from and requirements to meet when looking for an IAM tool. Check these boxes before committing to IAM. Continue Reading

By

• Kristen Gloss

SMEs more worried about GDPR’s threat to reputation than fines

SMEs are more worried about the damage GDPR non compliance will do to their reputations than their wallets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch Tax Authority not fully GDPR-compliant as deadline approaches

The Netherlands’ Department of Finance warns that not all aspects of the EU privacy law will be implemented by the 25 May deadline Continue Reading

By

• Tijs Hofmans

No2ID and the Empire Windrush

The "scandal" concerning the "Windrush Generation" appears to be collateral damage from the failure to agree coherent policies for sharing public sector identities and personal information after ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Account takeover up tenfold in past year

The incidence of online account takeover and the proportion of high-risk account access attempts underlines the need for improved authentication, says fraud detection firm Continue Reading

By

• Warwick Ashford, Senior analyst

Why Windrush scandal demonstrates the importance of technology to political decision-making

The Windrush scandal has revealed many disturbing things about government policy that have nothing to do with IT. But the issues raised amply demonstrate the importance of technology considerations ... Continue Reading

By

• Bryan Glick, Editor in chief

Mastercard calls for global online payments standard

Mastercard and its EMV partners are pushing for online payments standards similar to those for point-of-sale payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Interview: GDPR will give Dutch privacy watchdog its teeth

The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading

By

• Tijs Hofmans

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster Continue Reading

By

• Aaron Tan, TechTarget

Home Office issues guidance on tech to prevent identity fraud

Advice highlights the benefits of using identity document validation to audit and share data on fraudulent documents Continue Reading

By

• Lis Evenstad

Facebook announces more privacy control updates

Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading

By

• Warwick Ashford, Senior analyst

ShopDirect set to use AI to detect fraud on phone calls

The online retailer has signed a contract to use voice authentication technology from Pindrop to tackle fraud and improve customer experience Continue Reading

By

• Cliff Saran, Managing Editor

Blockchain not ready for cross-border bank payments

The use of blockchain in certain parts of the financial services industry is limited at present due to the additional IT work required around its use Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

C-suite a cyber attack risk, say security chiefs

Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Patch, scan and lock down to counter fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Petra Wenham

Public sector organisations ill-prepared for GDPR

Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Universal Credit project warned over Gov.uk Verify performance in 2015

Government project management experts warned as long ago as 2015 that a problem with GDS's Verify online identity system could undermine the Universal Credit business plan Continue Reading

By

• Bryan Glick, Editor in chief

Security researchers demonstrate ransomware attack on robots

Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against Continue Reading

By

• Warwick Ashford, Senior analyst

Only half of ransomware payments honoured

Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses under pressure to allow easier access to cloud

Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto Continue Reading

By

• Warwick Ashford, Senior analyst

Security remains an afterthought in DevOps

Enterprises in Asia are lapping up DevOps but less than one-third have baked security processes into their developments Continue Reading

By

• Aaron Tan, TechTarget

NHS to pilot ID verification platform this spring

NHS roadmap for digital services sets out plans for launching a joined-up NHS app, piloting its citizen ID platform and moving across to the new NHS.uk website Continue Reading

By

• Lis Evenstad

Security fears delay roll-out of national e-voting system in Finland

Project enters problem-solving phase to identify advanced, effective and best practice solutions to develop a secure internet-based voting system Continue Reading

By

• Gerard O'Dwyer

UK plans laws to protect company directors from ID theft

Legislation will make it easier for directors to remove their personal addresses from the company register Continue Reading

By

• Warwick Ashford, Senior analyst

Getting a handle on mobile security in your enterprise

Everyone now has a mobile device at work, so how can enterprises ensure they are secure? Continue Reading

By

• Rene Millman

Tech industry signs cyber security charter

Nine technology organisations have signed a cyber security charter aimed at raising the level of cyber security internationally Continue Reading

By

• Warwick Ashford, Senior analyst

A third of Brits plan to exercise right to be forgotten

After the General Data Protection Regulation compliance deadline, a third of Britons polled say they plan to exercise their right to be forgotten, but few fully understand the GDPR and how it will affect them Continue Reading

By

• Warwick Ashford, Senior analyst

Blockchain to give global LGBT community a louder economic voice

Blockchain will underpin a global platform that aims to give the LGBT community a more powerful economic voice Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Telegram zero-day exploit is a warning

The discovery of an exploit of a zero-day vulnerability in the Telegram messaging app demonstrates that not all “secure” apps are automatically safe, security experts have warned Continue Reading

By

• Warwick Ashford, Senior analyst

Video: Lauri Love – why we need volunteers to fight malware

Lauri Love talks to Computer Weekly about plans to collaborate with others to tackle malware and use cryptocurrencies to create new ways for businesses to work Continue Reading

By

• Julia Gregory

Malaysian regulator and firm sued over data breach

The Malaysian Communications and Multimedia Commission and a local company have been caught in a civil lawsuit over a massive data breach reported last year Continue Reading

By

• Aaron Tan, TechTarget