Identity and access management products

Three breach highlights several security issues, says (ISC)2

Customer data breaches continue to demonstrate that companies are still not treating cyber risk like every other business risk, says Adrian Davis of (ISC)2 Continue Reading

By

• Warwick Ashford, Senior analyst

Digital transformation not a finite process, says Martin Kuppinger

Security, privacy and identity are key to digital transformation, which is an evolutionary process, according to Martin Kuppinger Continue Reading

By

• Warwick Ashford, Senior analyst

Online identity needs to be fixed, says Microsoft’s Kim Cameron

Software giant’s identity architect calls on enterprises to professionalise the way they relate to customers to help replace online identity infrastructure that is not fit for purpose Continue Reading

By

• Warwick Ashford, Senior analyst

GDS aiming for 25 million users of Gov.uk Verify by 2020

Early draft of new GDS strategy reveals an ambitious target for its identity assurance service Continue Reading

By

• Bryan Glick, Editor in chief

CW ASEAN: SMEs present security weakness

In this month's CW ASEAN, we look at how the cyber security defences at small and medium-sized enterprises in Southeast Asia may have some vulnerabilities, resulting in cyber security attacks on the large corporations they work with. We also consider the need to educate users of smartphones and tablets across the region as card fraud rates rise, with high use of mobile devices considered a contributing factor. Read the issue now. Continue Reading

CW ANZ: Using gamification to build cyber security skills

In this month's CW ANZ, we look at how PwC is using an online game to give its customers first-hand experience of what it means to face a cyber attack. We also look at how identity is gaining greater prominence in the security debate in Australia as the DTO takes the wraps off plans for a national identity system. Read the issue now. Continue Reading

UK government re-announces £1.9bn cyber security spend

Five-year spending increase - announced by Chancellor Philip Hammond 12 months after George Osborne did so - will support new UK cyber security strategy Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The cyber threats lurking within every company

Insider threats have been around for a long time, but it is only recently that people have begun to acknowledge the true danger they pose Continue Reading

By

• Peter Ray Allison

Saving Lauri Love: activists plan their next move

An eclectic bunch of activists, charity workers and reformed hackers spent a rainy Sunday afternoon plotting their next move in a campaign to save Lauri Love from extradition to the US on hacking charges Continue Reading

By

• Julia Gregory

Gary McKinnon: Why Lauri Love should be spared the nightmare of extradition

Computer activist Lauri Love should be spared a life sentence in a US jail, says former hacker Gary McKinnon Continue Reading

By

• Gary McKinnon

Consumers trust banks more than government for biometric security

UK citizens think banks are the best organisations to provide biometric authentication for payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Mobile device use feeds card fraud in Asean region

Card fraud is rising in Asean countries, with the high use of mobile devices a contributing factor. Continue Reading

By

• Ai Lei Tao

Westpac bank launches Databank data protection service

Australia's Westpac bank is offering organisations that share customer data a service that it says securely locks down personal information Continue Reading

By

• Stuart Kennedy

Consumer identity management is the core of real CRM

IAM + CRM is much more than simply IAM for external users, says Ivan Niccolai Continue Reading

By

• Ivan Niccolai

Government tests use of social media accounts for verifying online user identity

Online public service users may be asked to allow access to their Facebook, LinkedIn or Twitter accounts to help prove they are who they say they are Continue Reading

By

• Bryan Glick, Editor in chief

IBM sets up security centre in Canberra

IBM leads the charge as large private businesses invest heavily in security resources across Australia in an attempt to close the security gap Continue Reading

By

• Beverley Head

CW ASEAN: July 2016

Lessons from the Philippine government hack: In this issue we ask why a hack on the Philippine Commission on the Elections (Comelec) was allowed to happen and what organisations in Southeast Asia can learn from this breach of security. Retailers in the region are concerned – read how the theft of customer data is their biggest worry. Continue Reading

CW ANZ: July 2016

Australia knows it has a cyber security problem, but not the scale. In this month’s CW ANZ we describe how Australia's $230m security strategy serves as a wake-up call to enterprises. We also reveal the techniques and technologies being used to protect one Australian school, as well as a more general look at the main cyber threats to orgainsations in Australia. Read the issue now. Continue Reading

The problem of passwords and how to deal with it

Security experts have long recognised passwords as inadequate, but finally technology is offering some viable alternative authentication methods that businesses can explore to keep their data safe Continue Reading

By

• Peter Ray Allison

Enterprises urged not to view security as a barrier to internet of things adoption

The Lower Colorado River Authority’s chief administrative officer urges enterprises to balance the risks of using the internet of things with the benefits connected devices can bring Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Lower average cost of Australian data breaches is not a sign of comfort

The average cost of a data breach to Australian organisations dropped in 2015, according to research Continue Reading

By

• Beverley Head

Singapore banks adopt voice biometrics for user authentication

Banks in Singapore are rolling out biometric technology to improve customer services by speeding up the authentication process Continue Reading

By

• Ai Lei Tao

Philippines government data breach is a warning to Asean region

Security is a rising concern in the Asean region, with fears fuelled by incidents such as the recent hacking incident in Manila Continue Reading

By

• Zafar Anjum

Gov.uk Verify to go live 24 May 2016

On 24 May 2016, the government’s identity assurance platform will move from beta to “fully live”, after missing its original April go-live target Continue Reading

By

• Lis Evenstad

IAM central to Deutsche Bank’s digital transformation

Deutsche Bank is using a centralised identity and access management (IAM) system and an application program interface (API) architecture for digital transformation Continue Reading

By

• Warwick Ashford, Senior analyst

Australian health sector an easy target for cyber criminals, says IBM

A push to encourage greater adoption of electronic health records has raised the spectre of online record theft Continue Reading

By

• Beverley Head

Gov.uk Verify misses April go-live target

The Government Digital Service didn’t meet its target of taking identity assurance service Verify out of beta by the end of April, but is “nearly there”, according to programme director Janet Hughes Continue Reading

By

• Lis Evenstad

BBC turns micro:bit computers into IoT devices

The BBC and Nominet demonstrate a new use case for the micro:bit computer and hope to turn Britain’s schoolchildren into internet of things pioneers Continue Reading

By

• Alex Scroxton, Security Editor

How to manage IT access for external users

Identity and access management has extended from being solely an internal IT management process to focus on external business engagement too Continue Reading

By

• Bob Tarzey

Gov.uk Verify not secure enough for NHS, says HSCIC

The government’s Verify identity verification platform isn’t secure enough for the NHS, so Liverpool Clinical Commissioning Group and HSCIC are working to add extra levels of security Continue Reading

By

• Lis Evenstad

Australian girls believe online harassment is endemic

There are clear signals that online threats against women and attempts to invade their privacy are becoming societal norms in Australia Continue Reading

By

• Beverley Head

Robots at your service

In this week’s Computer Weekly, we find out how financial services firms are investing in artificial intelligence to create robo-advisors to help customers with financial advice online. We ask if virtual reality is ready for mainstream business adoption or is still just an over-hyped technology. And we examine the key steps needed to successfully build smart cities using internet of things and networking technologies. Read the issue now. Continue Reading

IAM is the future for managing data security

Why identity and access management is taking centre stage in companies’ access policies Continue Reading

By

• Andras Cser and Merritt Maxim

Royal Mail becomes eighth accredited Gov.uk Verify provider

The Royal Mail is the latest provider to be accredited to support the government’s Gov.uk Verify identity assurance service Continue Reading

By

• Lis Evenstad

The problem with passwords: how to make it easier for employees to stay secure

An organisation’s IT security can be compromised if staff do not follow a strict policy of using strong passwords to access internal systems Continue Reading

By

• Jeremy Bergsman, CEB

Security Think Tank: Top five access control mistakes

In the modern business environment, what are the most common access control mistakes and what is the best way to correct them? Continue Reading

By

• Tim Holman, 2-sec

Mobile innovation shifts to smartphone services

As smartphone sales continue to stagnate, suppliers are looking to innovate in more novel ways Continue Reading

By

• Alex Scroxton, Security Editor

Gov.uk Verify identity system targets 50 government services for April go-live

Government identity assurance system is set to move from beta to live in April, three years after its original target date Continue Reading

By

• Bryan Glick, Editor in chief

HSBC online services hit by DDoS attack

HSBC was hit by a distributed denial of service (DDoS) attack, which targeted its online personal banking services. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Candy Crush maker King secures mobile access through cloud

Candy Crush maker King.com uses cloud-based Duo Security authentication for access to cloud services, customised apps and remote VPNs Continue Reading

By

• Warwick Ashford, Senior analyst

Most Android devices running outdated versions

Nearly a third of Android devices in enterprises today are running version 4.0 or older of the operating system, leaving them highly susceptible to vulnerabilities, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 IT security stories of 2015

Computer Weekly looks back at the most significant stories on IT security in the past 12 months Continue Reading

By

• Warwick Ashford, Senior analyst

Essential guide to data breaches, the dark web and the hidden data economy

In this guide, we look at the aftermath of a data breach - what do cyber criminals use that stolen data for, and what can companies do to avoid becoming a victim? Continue Reading

Word ‘smart’ being abused by IoT advocates

Speakers at an event hosted by Cambridge Wireless say the term ‘smart’ is overused to describe connected devices on the internet of things Continue Reading

By

• Alex Scroxton, Security Editor

Technology helping to deliver aid for refugees

In this week's Computer Weekly, we find out how technology is helping to deliver vital aid to Syrian refugees in the Middle East. We look at the barriers to achieving the government's aim of a paperless NHS. And the CTO of special effects studio Framestore talks about the IT challenges behind hit movies such as Gravity. Read the issue now. Continue Reading

M&S data breach forces retailer to temporarily suspend service

A glitch that allowed online customers to see each others' details forced retailer Mark & Spencer to take its website offline while it resolved the issue Continue Reading

By

• Clare McDonald, Business Editor

IT giants Dell and EMC unite

In this week's Computer Weekly, Dell's proposed $67bn acquisition of EMC would be the biggest in the history of IT – we assess the implications. £175bn of IT outsourcing contracts come up for renewal in the next three years- what are your options? And we hear from IT leaders about security and the internet of things. Read the issue now. Continue Reading

The true cost of a cyber security breach in Australia

The costs of cyber security breaches can quickly add up with fines, reputational damage and overhauls to network security all hitting the coffers. The case of one Australian firm shows why paying a ransom to a hacker might be tempting. Continue Reading

By

• Beverley Head

Lack of trust for banks causes NHS rethink over government online identity scheme

NHS trials of the Verify ID assurance system found patients concerned over using banks to allow access to medical data Continue Reading

By

• Mark Ballard

Estonian government IT initiative increases virtual population

Estonia is leading the way when it comes to providing easy and secure access to government services for citizens and foreigners alike Continue Reading

By

• Tarmo Virki

Aid organisations using technology to help Syrian refugees in the Middle East

Technology is playing a crucial role in supporting humanitarian aid organisations coping with the influx of Syrian refugees in the Middle East Continue Reading

By

• Andy Favell

How technology is helping deliver aid to Syrian refugees in the Middle East

The Syrian refugee crisis has engulfed the Middle East, but technology is proving to be an essential tool to help aid organisations support displaced people Continue Reading

By

• Andy Favell

RSA Group flags ID theft risk to Lloyds Bank customers following datacentre storage theft

International insurance group has seen 500 customers take up offer of identity theft protection in wake of datacentre theft Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Conventional security measures hit productivity, study shows

Most IT professionals say context-aware security would improve productivity without compromising security, a survey from Dell reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile phone users at risk as hackers bug and track victims

An investigation by Australian TV show 60 Minutes demonstrates how hackers based thousands of miles away in Germany were able to record the calls of an Australian senator and track his movements Continue Reading

By

• Ross Coulthart, 60 Minutes Australia

Why the time is ripe for security behaviour analytics

Recent months have seen an uptick in announcements by security suppliers around behavioural analytics, but what is driving this trend? Continue Reading

By

• Warwick Ashford, Senior analyst

GDS targets three million new users of Gov.uk Verify service in next 12 months

Roll-out of the system for logging in to digital public services is taking longer than expected, but user numbers are expected to grow significantly in 2015 Continue Reading

By

• Bryan Glick, Editor in chief

Dashlane bullish about the future despite LastPass hack

Password management firm Dashlane is confident its business model will evolve and continue to be relevant even if passwords eventually disappear Continue Reading

By

• Warwick Ashford, Senior analyst

Pharmaceutical companies use BPM to cut cost of clinical trial drugs

Pharmaceutical companies have developed an IT system to secure the supply of medicines they need for clinical studies, saving hundreds of thousands on their drugs bill in the process Continue Reading

By

• Bill Goodwin, Computer Weekly

Government Digital Service insists Verify safe despite claims of vulnerabilities

An academic paper suggests the Gov.uk Verify system could be used as a spy network, but the Government Digital Service (GDS) insists this is not the case Continue Reading

By

• Clare McDonald, Business Editor

Government preparing to let private sector companies use its Verify identity scheme

The Cabinet Office is talking to banks, insurers and retailers to establish Gov.uk Verify identity assurance as a national scheme Continue Reading

By

• Mark Ballard

VMware puts network virtualisation to work in McAfee environments

VMware announces an integrated system to automate distribution and enforcement of McAfee’s network security platform using its NSX network virtualisation system Continue Reading

By

• Alex Scroxton, Security Editor

Data classification key to IP protection, says Titus

Data classification can help organisations get more value out of encryption and data loss prevention systems Continue Reading

By

• Warwick Ashford, Senior analyst

Google announces security features for Android

Google announces better app permission controls and other Android security changes at its Google I/O developer conference Continue Reading

By

• Warwick Ashford, Senior analyst

Wi-Fi Global Congress: Hotspot 2.0 standard addresses wireless security holes

At Wi-Fi Global Congress, Ruckus Wireless announces it will be first to market with the second release of Hotspot 2.0 Continue Reading

By

• Alex Scroxton, Security Editor

PSNGB rebrands to drive information sharing across PSN

PSNGB, the trade association set up to promote the Public Services Network, rebrands itself as Innopsis and says its work is far from over Continue Reading

By

• Alex Scroxton, Security Editor

Future IAM will need to be broader, says Martin Kuppinger

Identity and access management systems need to look at all forms of identity, not just employees or users, says KuppingerCole analyst Continue Reading

By

• Warwick Ashford, Senior analyst

Time to embrace a new level of IAM, says Martin Kuppinger

A new level of identity and access management is at hand, yet many businesses still rely on usernames and passwords Continue Reading

By

• Warwick Ashford, Senior analyst

Bill Binney, the ‘original’ NSA whistleblower, on Snowden, 9/11 and illegal surveillance

Always a patriot: Computer Weekly talks to Bill Binney, the senior NSA official who blew the whistle before Edward Snowden Continue Reading

By

• Fiona O'Cleirigh

The future of Moore's Law at 50

In this week's Computer Weekly, Moore's Law – the seminal forecast by Intel founder Gordon Moore that oversees technology development – is 50 years old. We look at its modern relevance and future implications. IT chiefs discuss whether Windows is still core to their strategy. And we look back at five years of government IT. Read the issue now. Continue Reading

Exit checks system for UK borders finally goes live

The Home Office launches a system for making exit checks of travellers at UK borders, following the scrapped e-Borders programme Continue Reading

By

• Bryan Glick, Editor in chief

UK government adds five authentication providers to Gov.uk Verify identity management system

The Government Digital Service (GDS) adds five authentication providers to the Gov.uk Verify identity and access management scheme Continue Reading

By

• Clare McDonald, Business Editor

Case study: Norwegian insurer invests in Darktrace machine-learning cyber defence

Shipping insurance company DNK hopes to inspire the rest of the shipping industry to adopt Darktrace’s cyber defence system Continue Reading

By

• Jenny Stadigs

BlackBerry 10.3.1 review: Access Android apps and Blend

BlackBerry has finally released version 10.3.1 of its mobile operating system, which gives access to the Amazon Android app store Continue Reading

By

• Cliff Saran, Managing Editor

Former Capital One data analysts charged with mining customer data

US financial services regulator SEC charges two former employees of financial services firm Capital One with insider trading Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Cabinet Office begins procurement for next stage of Gov.uk Verify

The Cabinet Office has submitted a tender notice for a £150m three-year framework for the provision of identity assurance services Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

US interception in the EU faces new legal challenges

US government orders against Microsoft to hand over email data 'infringes privacy legislation' in other countries Continue Reading

By

• Fiona O’Cleirigh

The most influential people in UK IT 2014

In this week's Computer Weekly, we unveil the 50 most influential people in UK IT for 2014, and interview the winner of our UKtech50 list, Unilever's global CIO, Jane Moran. We examine how Cisco is responding to software-defined networking. And we hear from IT chiefs successfully implementing identity and access management. Read the issue now. Continue Reading

CGI secures communications between pilots and air traffic control

Satellite communications firm Inmarsat has outsourced the provision of security IT and services to CGI Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

The business challenges and benefits of identity and access management

IT leaders gathered at a CW500 Club meeting to hear from peers about the challenges of identity and access management Continue Reading

By

• Bryan Glick, Editor in chief

Home Depot traces credit card data hack to supplier compromise

US retailer Home Depot reveals its recent data breach was linked to a compromised supplier’s credentials Continue Reading

By

• Warwick Ashford, Senior analyst

Half a million citizens to be using Gov.uk Verify by April 2015

Government now expects to have nearly half a million people using its Gov.uk Verify service for online identity assurance by April 2015 Continue Reading

By

• Bryan Glick, Editor in chief

Securing critical industrial systems

In this week’s Computer Weekly, we examine the security threats to the industrial control systems that power the UK’s critical national infrastructure, and ask what can be done to better protect them. We look at the key considerations when choosing an infrastructure as a service supplier. And we compare six of the top hybrid flash array products from the leading storage hardware providers. Read the issue now. Continue Reading

Gov.uk Verify identity assurance service ready to go live

Government expected to launch first service using digital identity assurance in "next couple of weeks" Continue Reading

By

• Bryan Glick, Editor in chief

Azure CTO Mark Russinovich's top ten public cloud security risks

Microsoft Azure cloud CTO Mark Russinovich identified ten key security risks of public cloud services Continue Reading

By

• Archana Venkatraman, Datacentre Editor

Malware being used to steal cash from ATMs

Criminals are using malware to steal cash from ATMs without debit and credit cards Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Hacking IT from the inside

In this week’s Computer Weekly, car giant Daimler talks about its IT security strategy and the benefits of having its own in-house hacking team. App developers are under fire for collecting too much personal data – we examine the latest best practice. Our new buyer’s guide looks at virtualisation backup. And our review of Microsoft’s Surface Pro 3 tablet asks whether it can replace the laptop. Read the issue now. Continue Reading

GDS unveils 'Gov.UK Verify' public services identity assurance scheme

The Government Digital Service (GDS) debuts a system to prove users’ identities when using public services online, branded as 'Gov.UK Verify' Continue Reading

By

• Bryan Glick, Editor in chief

Google denies breach after hackers leak millions of user logins

Google denies claims cyber criminals stole users' data and downplays the threat after a hacker purportedly leaked 4.9 million Gmail logins Continue Reading

Barclays bank launches biometric authentication

Barclays bank plans to launch biometric readers that read users' finger veins to authenticate customers Continue Reading

By

• Clare McDonald, Business Editor

Load balancing supports Kent County Council's VDI project

Kent County Council picks Kemp Technologies load balancers to support a deployment of VMware Horizon View and Workspace across its estate Continue Reading

By

• Alex Scroxton, Security Editor

What ingredients go into the successful app store?

An enterprise app store should provide the controlled availability of apps for employees.We look at what is available for organisations to use Continue Reading

By

• Bernt Ostergaard , Quocirca

Fingerprint scanners most popular alternative to banking passwords

Fingerprint scanning technology is the most favoured biometric security alternative to passwords for UK bank customers Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Paddy Power hit by data breach in 2010

Gambling firm Paddy Power owns up to 2010 data breach after recovering a compromised dataset in Canada Continue Reading

By

• Alex Scroxton, Security Editor

Tackle IAM with a risk-based approach, says KPMG

A risk-based approach is the best way to tackle identity and access management, says KPMG Continue Reading

By

• Warwick Ashford, Senior analyst

Why using voice biometrics is a good idea

Banks and other organisations are turning to voice biometrics, but why do they believe the technology is good idea? Continue Reading

By

• Warwick Ashford, Senior analyst

Barclays passes government’s ‘internet-born threat’ test

Barclays Bank has been awarded the government’s cyber security certificate for digital banking services after independent tests of services such as Pingit Continue Reading

Most people keen to share biometric data for smoother travel

A study has revealed that 89% of citizens agree with the use of biometric identification to aid travel Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Benefits of accessing data outweigh privacy risks for chronically ill

Over half of UK patients with chronic health conditions want access to their medical records and believe the benefits outweigh privacy risks Continue Reading

Datacentre lessons learnt from Heartbleed bug

The Heartbleed bug, an OpenSSL flaw affecting millions of websites, has some lessons for datacentre providers and operators Continue Reading

By

• Archana Venkatraman, Datacentre Editor