Identity and access management products

Security Think Tank: Some basic password guidelines

In light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Petra Wenham

Tackling the digital identity problem

In this week’s Computer Weekly, as UK government attempts to create a digital identity standard flounder, we examine progress on establishing the online ID system the digital economy needs. Barclays Bank talks about its move to DevOps and public cloud with Amazon Web Services. And we find out how using AI and chatbots could help improve IT service management. Read the issue now. Continue Reading

Security Think Tank: Passwords alone are not good enough

In the light of the fact that complex passwords are not as strong as most people think, and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Emma Bickerstaffe, Information Security Forum (ISF)

Security Think Tank: Firms need to support good password practices

In the light of the fact that complex passwords are not as strong as most people think and that most password strategies inevitably lead to people following them blindly, what actually makes a good password and when is a password alone not enough? Continue Reading

By

• Mike Gillespie

Security Think Tank: How to create good passwords and add security layers

In light of the fact complex passwords are not as strong as most people think and most password strategies inevitably lead to people following them blindly, what actually makes a good password - and when is a password alone not enough? Continue Reading

By

• Simon Persin, Turnkey Consulting

Global IoT security standard remains elusive

Despite the lack of a global internet of things security standard, existing security frameworks are on the same page in areas such as device upgradability and data stewardship Continue Reading

By

• Aaron Tan, Informa TechTarget

Norway’s National Security Agency warns IT industry about security obligations

IT service providers serving organisations in Norway have received a timely reminder about their security obligations. Continue Reading

By

• Gerard O'Dwyer

Singapore faced cyber attacks during Trump-Kim summit

Russian attackers allegedly scanned IP phones in the city-state for vulnerabilities, although it was unclear what they were after or whether they were successful Continue Reading

By

• Aaron Tan, Informa TechTarget

The next moves by DCMS on data and digital identity must lay foundations for UK's digital economy

Matt Hancock, the secretary of state for digital, culture, media and sport (DCMS), is not everyone’s cup of tea – especially when that cup is Matt Hancock branded. But regardless of whether you’re ... Continue Reading

By

• Bryan Glick, Editor in chief

Encryption is under attack, says Venafi CEO Jeff Hudson

Encryption is one of the fundamental principles on which the internet is built, but this vital technology is under threat from criminals and ill-advised government policies, says Venafi CEO Jeff Hudson Continue Reading

By

• Peter Ray Allison

How Australia is keeping pace with ICS threats

Besides bridging the security gap between IT and operational technology teams, Australia is driving efforts to bolster the security of IoT devices Continue Reading

By

• Beverley Head

GDS loses digital identity policy to DCMS

The move follows DCMS taking over data policy from GDS and means Cabinet Office is no longer responsible for relations with private sector ID ecosystem Continue Reading

By

• Bryan Glick, Editor in chief

Scotland to begin building identity platform prototype this autumn

Scottish government plans flexible approach to online identity providers as it aims to launch alpha phase of is online identity assurance programme in August 2018 Continue Reading

By

• Lis Evenstad

Cyber resilience key to securing industrial control systems

Operators of industrial control systems can build greater cyber resilience by getting IT and operational technology teams to work more closely together and improving the visibility of their infrastructure, among other security measures Continue Reading

By

• Aaron Tan, Informa TechTarget

Identity and access management tools add AI, microservices

AI and as-a-service platforms enable IT to take a more hands-off approach. But with adoption in the early stages, most IT pros wonder what the future holds for identity management. Continue Reading

By

• Erica Mixon

Grab outlines its approach to cyber security

Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement Continue Reading

By

• Aaron Tan, Informa TechTarget

CW Nordics: Finland delays e-voting plan

Security concerns have re-emerged to further frustrate the Finnish government’s plans to launch a national e-voting system. Also read about a study by the Stockholm School of Economics that looks at the likely impact of AI, machine learning and robotics on people’s lives. And find out why Norway has accelerated plans to scale up its national cyber security infrastructure. Continue Reading

England and Wales Cricket Board to improve players’ medical data

Cricketers’ medical images will be stored securely in an independent clinical archive, enabling clinicians to access medical data and make treatment decisions more quickly Continue Reading

By

• Lis Evenstad

Digital identity: Is the puzzle about to be solved?

Solving the digital identity problem is key to the future of the digital economy as a whole – but how close are we? Computer Weekly looks at what is happening with Gov.uk Verify, private sector involvement, and lessons the UK could learn from other countries Continue Reading

By

• Lis Evenstad

UK government promises laws to police 'Wild West Internet'

UK government plans laws to make online activity safer after green paper reveals more needs to be done to protect citizens Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to get new digital visa service

The Home Office has signed up to a deal with Sopra Steria for a visa service allowing people to use biometrics and digital files as part of their application Continue Reading

By

• Lis Evenstad

NHS England on the cusp of launching first citizen identity pilot

The NHS will begin trialling its identity verification system with a non-clinical service shortly, with 20 other services in the pipeline, according to NHS England chief digital officer Juliet Bauer Continue Reading

By

• Lis Evenstad

GDS aims for path of least embarrassment as it shifts strategy on Gov.uk Verify

Last week, the Government Digital Service (GDS) dedicated a whole day to talking about what it’s up to, at its first Sprint event in two years. About time too, many observers said, since GDS seemed ... Continue Reading

By

• Bryan Glick, Editor in chief

SMEs more worried about GDPR’s threat to reputation than fines

SMEs are more worried about the damage GDPR non compliance will do to their reputations than their wallets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch Tax Authority not fully GDPR-compliant as deadline approaches

The Netherlands’ Department of Finance warns that not all aspects of the EU privacy law will be implemented by the 25 May deadline Continue Reading

By

• Tijs Hofmans

No2ID and the Empire Windrush

The "scandal" concerning the "Windrush Generation" appears to be collateral damage from the failure to agree coherent policies for sharing public sector identities and personal information after ... Continue Reading

By

• Philip Virgo, Winsafe Ltd

Account takeover up tenfold in past year

The incidence of online account takeover and the proportion of high-risk account access attempts underlines the need for improved authentication, says fraud detection firm Continue Reading

By

• Warwick Ashford, Senior analyst

Why Windrush scandal demonstrates the importance of technology to political decision-making

The Windrush scandal has revealed many disturbing things about government policy that have nothing to do with IT. But the issues raised amply demonstrate the importance of technology considerations ... Continue Reading

By

• Bryan Glick, Editor in chief

Mastercard calls for global online payments standard

Mastercard and its EMV partners are pushing for online payments standards similar to those for point-of-sale payments Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Government to set up £13.5m cyber security centre

Located at the 2012 Olympic Park, the London Cyber Innovation Centre could create up to 2,000 jobs in cyber security Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Storage compliance for GDPR data subject requests

The General Data Protection Regulation is upon us. Mathieu Gorge, CEO of Vigitrust, talks you through the key areas needed for compliance in storage of data subjects’ data and how to find it quickly on request Continue Reading

By

• Antony Adshead, Storage Editor

Interview: GDPR will give Dutch privacy watchdog its teeth

The Netherlands’ privacy watchdog has not handed out fines so far because there has been no reason to, says the organisation’s chairman, Aleid Wolfsen Continue Reading

By

• Tijs Hofmans

Most airports not protected from cyber threats

The chairman of the Israel Airports Authority paints a dismal picture of the state of cyber security in aviation, and offers advice on what can be done to avert the next disaster Continue Reading

By

• Aaron Tan, Informa TechTarget

Home Office issues guidance on tech to prevent identity fraud

Advice highlights the benefits of using identity document validation to audit and share data on fraudulent documents Continue Reading

By

• Lis Evenstad

Facebook announces more privacy control updates

Social media giant updates privacy settings and tools in response to the unfolding controversy over Cambridge Analytica’s use of Facebook data for political campaigns Continue Reading

By

• Warwick Ashford, Senior analyst

ShopDirect set to use AI to detect fraud on phone calls

The online retailer has signed a contract to use voice authentication technology from Pindrop to tackle fraud and improve customer experience Continue Reading

By

• Cliff Saran, Managing Editor

Blockchain not ready for cross-border bank payments

The use of blockchain in certain parts of the financial services industry is limited at present due to the additional IT work required around its use Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Dutch SMEs’ cyber security is insufficient

Nowhere in the Netherlands is digitisation as big as it is in small and medium-sized enterprises, but the sector still has a lot to do in terms of cyber security Continue Reading

By

• Kim Loohuis

C-suite a cyber attack risk, say security chiefs

Those tasked with running organisations are the most likely group to expose them to a major cyber attack, a poll of UK information security executives shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Patch, scan and lock down to counter fileless malware

What should organisations do at the very least to ensure business computers are protected from fileless malware? Continue Reading

By

• Petra Wenham

Public sector organisations ill-prepared for GDPR

Public sector organisations in the UK need to do much more to comply with the General Data Protection Regulation rule on providing information to citizens about details held about them Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Universal Credit project warned over Gov.uk Verify performance in 2015

Government project management experts warned as long ago as 2015 that a problem with GDS's Verify online identity system could undermine the Universal Credit business plan Continue Reading

By

• Bryan Glick, Editor in chief

Security researchers demonstrate ransomware attack on robots

Researchers have carried out a ransomware attack on robots to show that such attacks are possible and should be guarded against Continue Reading

By

• Warwick Ashford, Senior analyst

Only half of ransomware payments honoured

Only half of ransomware victims who pay ransoms to cyber criminals recover their data, a report reveals, pointing to a need for more effective strategies to deal with these attacks Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses under pressure to allow easier access to cloud

Businesses are under pressure from employees to use consumer-focused authentication methods for cloud applications, but that could have both positive and negative security implications, warns Gemalto Continue Reading

By

• Warwick Ashford, Senior analyst

Security remains an afterthought in DevOps

Enterprises in Asia are lapping up DevOps but less than one-third have baked security processes into their developments Continue Reading

By

• Aaron Tan, Informa TechTarget

NHS to pilot ID verification platform this spring

NHS roadmap for digital services sets out plans for launching a joined-up NHS app, piloting its citizen ID platform and moving across to the new NHS.uk website Continue Reading

By

• Lis Evenstad

Security fears delay roll-out of national e-voting system in Finland

Project enters problem-solving phase to identify advanced, effective and best practice solutions to develop a secure internet-based voting system Continue Reading

By

• Gerard O'Dwyer

UK plans laws to protect company directors from ID theft

Legislation will make it easier for directors to remove their personal addresses from the company register Continue Reading

By

• Warwick Ashford, Senior analyst

Getting a handle on mobile security in your enterprise

Everyone now has a mobile device at work, so how can enterprises ensure they are secure? Continue Reading

By

• Rene Millman

Tech industry signs cyber security charter

Nine technology organisations have signed a cyber security charter aimed at raising the level of cyber security internationally Continue Reading

By

• Warwick Ashford, Senior analyst

A third of Brits plan to exercise right to be forgotten

After the General Data Protection Regulation compliance deadline, a third of Britons polled say they plan to exercise their right to be forgotten, but few fully understand the GDPR and how it will affect them Continue Reading

By

• Warwick Ashford, Senior analyst

Blockchain to give global LGBT community a louder economic voice

Blockchain will underpin a global platform that aims to give the LGBT community a more powerful economic voice Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Telegram zero-day exploit is a warning

The discovery of an exploit of a zero-day vulnerability in the Telegram messaging app demonstrates that not all “secure” apps are automatically safe, security experts have warned Continue Reading

By

• Warwick Ashford, Senior analyst

Video: Lauri Love – why we need volunteers to fight malware

Lauri Love talks to Computer Weekly about plans to collaborate with others to tackle malware and use cryptocurrencies to create new ways for businesses to work Continue Reading

By

• Julia Gregory

Malaysian regulator and firm sued over data breach

The Malaysian Communications and Multimedia Commission and a local company have been caught in a civil lawsuit over a massive data breach reported last year Continue Reading

By

• Aaron Tan, Informa TechTarget

Mobile biometrics set to be game-changer in APAC

Telcos, financial institutions and other industry players risk losing market share if they do not keep up with the demand for security, convenience and mobility Continue Reading

By

• Lareinna Roxanne Lee and Quah Mei Lee

Spoofing of Dutch politicians causes heated debate

 Continue Reading

Third party cyber breach risk set to rise

Third party cyber security risk should always have been a priority, but this has never been more important than it is now in light of new technology risks and data protection regulations Continue Reading

By

• Warwick Ashford, Senior analyst

Many UK firms ill-equipped to deal the cloud security risks

Many UK firms do not have the security tools, processes and skills required to ensure their cloud implementations are secure, a security researcher and advocate warns Continue Reading

By

• Warwick Ashford, Senior analyst

As Gov.uk Verify concerns mount, is GDS about to lose control of digital identity policy?

There’s a growing body of opinion that the government’s flagship digital identity system, Gov.uk Verify, has now become a major hindrance to the development of the UK’s digital identity ... Continue Reading

By

• Bryan Glick, Editor in chief

Security Think Tank: Automating basic security tasks

How can organisations evolve their security operations teams to do more automation of basic tasks and cope with dynamic IT environments? Continue Reading

By

• Petra Wenham

Dutch companies not ready for GDPR despite approaching deadline

Organisations in the Netherlands are racing towards General Data Protection Regulation compliance, but there is still much to be done Continue Reading

By

• Tijs Hofmans

Thousands of Universal Credit claimants unable to use Gov.uk Verify to apply for benefits

Government research shows that barely one-third of benefits claimants can successfully apply for new Universal Credit digital service using flagship online identity system Continue Reading

By

• Bryan Glick, Editor in chief

IT Priorities 2018: Data protection a top priority ahead of GDPR

Data protection continues to be a key focus for IT security investment for European firms in 2018, as does the emphasis on cloud and mobile security as companies move to these technology platforms Continue Reading

By

• Warwick Ashford, Security Editor

Davos debates global tech risks

In this week's Computer Weekly, world leaders at Davos discuss the growing reliance on technology and how to tackle the political and economic threats of the digital age. Our latest buyer's guide examines mobile app development. And we look at the biggest challenges facing CIOs in 2018 - including digital skills, automation, innovation and diversity. Read the issue now. Continue Reading

Millennials set to disrupt authentication, shows IBM study

Young adults are lax on passwords, but are more comfortable than older generations with biometric and multifactor authentication, an IBM study shows Continue Reading

By

• Warwick Ashford, Security Editor

Government sets out further details of Digital Charter

The government’s charter aims to tackle challenges and risks brought by technology in “an effective and responsible way”, thereby boosting the digital economy Continue Reading

By

• Lis Evenstad

Sweden puts government IT outsourcing under increased scrutiny

Government introduces rules to tighten security in IT outsourcing deals following a very public data leak last year Continue Reading

By

• Eeva Haaramo

Mastercard sets biometric ID deadline for banks

Mastercard has committed to guaranteeing that every one of its customers will have access to biometric authentication services by April 2019 Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Interview: Kaspar Korjus, Estonian e-Residency lead

As the number of people signing up to become Estonian e-residents exceeds the country’s birth rate, Computer Weekly speaks to the man heading up the programme Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

China’s Yitu eyes ASEAN market with facial recognition know-how

Facial recognition software specialist Yitu, which recently won a face identification accuracy contest in the US, has already nabbed regional clients such as Singapore’s Certis Cisco Continue Reading

By

• Aaron Tan, Informa TechTarget

IT Priorities 2018: Growing interest in hybrid IT in ASEAN

CIOs and IT professionals in Southeast Asia have earmarked hybrid infrastructure as a top priority in 2018, in spite of waning interest across the wider Asia-Pacific region Continue Reading

By

• Aaron Tan, Informa TechTarget

UAE tech growth prompts firms to review internal IT security

As IT becomes more prominent in the UAE economy, more and more internal connections between people and systems are created, all of which need to be secured Continue Reading

By

• Alicia Buller

Cyber attacks in 2017 drive Nordic security efforts

The volume of cyber attacks last year has increased boardroom focus on security in the Nordic region Continue Reading

By

• Eeva Haaramo

Sweden steps up cyber defence measures

Sweden is tightening up its cyber security defences as part of a wider national security strategy Continue Reading

By

• Gerard O'Dwyer

Top IT priorities for Nordic CIOs in 2018

Nordic CIOs tell Computer Weekly about their intentions for the year ahead Continue Reading

By

• Eeva Haaramo

UK government blames North Korea for WannaCry cyber attack

The UK and US governments say a North Korean group was responsible for the ransomware attacks that hit the NHS and other organisations globally this year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

On digital identity in the UK - and the likely future for Gov.uk Verify

Did you know the UK government has a minister for identity? It’s Baroness Susan Williams, whose full responsibilities go under the grander title of minister of state for countering extremism. ... Continue Reading

By

• Bryan Glick, Editor in chief

Barclays Bank stops offering Kaspersky software to new users

Bank is no longer offering customers Kaspersky anti-virus software after UK security agency issues warning Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Consumer identity management a growing trend

Consumer identity and access management is a growing trend, but system choice is still challenging, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

Businesses need to balance user experience, privacy and security

Balancing user experience, privacy and security for the connected consumer is a key challenge for online businesses, according to KuppingerCole Continue Reading

By

• Warwick Ashford, Senior analyst

UK only average in terms of digital public services

UK government has the innovation skills to become a digital public services leader, but needs to improve the ID and authentication that sits underneath it to reach this goal Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Blockchain could be used for citizen identity services, says Reform

Reform think tank argues that government could use blockchain technology to create a secure identity for citizens to use across public services Continue Reading

By

• Lis Evenstad

CW ANZ: On cyber alert

Achieving any form of computer security is an uphill task, costing Australian companies time and money with no prospect of a reprieve any time soon. In this month’s CW ANZ, read about the state of cyber security in Australia, Telstra’s efforts to help enterprises improve their cyber security posture, and how Australian organisations can keep up with the demands of cyber security. Also, find out why unsanctioned cloud apps continue to be a major bugbear among security chiefs in Australia. Continue Reading

CW ASEAN: How managed security services help to reduce cyber risk

The growing complexity and volume of cyber threats has led to rising demand for managed security services that provide the capabilities and technological know-how to combat cyber threats. In this month’s issue of CW ASEAN, read more about the pros and cons of using managed security services and considerations you should be aware of. Also, find out what organizations can do to put the odds in their favor when combating cyber threats. Continue Reading

How the biggest cyber security disasters could have been avoided

The headline-grabbing breaches that hit Accenture and Equifax in 2017 could have been averted had basic cyber hygiene been in place Continue Reading

By

• Jessica McGreal, Contino

TSB customers can use their faces to authenticate payments

Bank’s latest addition to its mobile apps is a facial recognition option for Apple iPhone X users Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Almost 70% of customers willing to use fingerprint biometrics to shop

Consumers are becoming more comfortable using biometrics to pay when shopping, with fingerprint payments proving the most popular biometric identification method Continue Reading

By

• Clare McDonald, Business Editor

Shadow Cabinet Office minister slams Gov.uk Verify for being ‘inefficient’

Labour’s Jon Trickett says the government’s identity assurance platform is a poor use of taxpayers’ money and is “being handled appallingly” Continue Reading

By

• Lis Evenstad

RSA’s Middle East cyber security conference gains its own identity

RSA Abu Dhabi conference focuses on region’s cyber security needs as digital technology deployments expand Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SMEs more vulnerable than ever to cyber attacks, survey shows

The biggest cyber threat to UK and US small businesses is employees’ weak passwords, as the frequency, intensity and cost of cyber attacks continue to rise, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Will the review of Gov.uk Verify fix the UK's digital identity problems?

The rumoured review of the UK government’s identity assurance programme provides the ideal opportunity to fix problems and accelerate progress Continue Reading

By

• Jerry Fishenden

Dutch government agreement increasingly focuses on IT security

The coalition government in the Netherlands has agreed its plan for the next four years, with IT security prominent Continue Reading

By

• Tijs Hofmans

Where the device hits the network – a mobile device management update

As business becomes increasingly mobile, we look at the latest trends in mobile device management to give businesses the edge Continue Reading

By

• Rene Millman

Government aligns data laws with GDPR

The UK government announces details of its data protection law that will align with the EU’s GDPR Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

People with non-IT backgrounds could help fill cyber security skills gap

Organisations should look to fill cyber security roles with people who are curious and have work experience rather than focusing solely on graduates Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Gov.uk Verify fails to meet key business case targets

Government’s controversial online identity system has missed important milestones that formed the basis of its original 2015 business case Continue Reading

By

• Bryan Glick, Editor in chief

Voice control in BBC iPlayer pilot demos Microsoft's AI ambitions

An internal BBC pilot in collaboration with Microsoft shows how voice control could be used on the iPlayer TV streaming app Continue Reading

By

• Cliff Saran, Managing Editor

TSB to introduce iris scan authentication in September 2017

TSB customers will soon be able to access their mobile bank accounts through iris scanning, which is regarded as the most secure biometric authentication available Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA