For Security & Risk Professionals

Case Study: Baker Tilly Virchow Krause Builds Trust With Strong Authentication

Customer Data Is Accessible Yet Safe Whether Users Are Connected Or Not

by Bill Nagel, November 16, 2009

Matt Jennings at Baker Tilly Virchow Krause needed to overhaul the accounting and advisory firm's security processes and technologies to ensure ongoing regulatory compliance and customer confidence. Replacing the company's use of a single password as . . .

For Security & Risk Professionals

Best Practices: Implementing Strong Authentication In Your Enterprise

Kill Two Birds With One Token

by Bill Nagel, July 23, 2009

The adoption of strong multifactor authentication (MFA) is on the rise. It's often the first port of call on the journey to a fuller identity and access management implementation; MFA directly addresses the password problem, which is a well-known and . . .

For Security & Risk Professionals

Case Study: For Avaya, Customers Are Not A Token Consideration

A Plug-And-Go Smart Token Combines With PKI For Security And Auditability

by Bill Nagel, July 23, 2009

Rick Robinson at Avaya had a vision for a multifunctional second-factor authentication credential that would satisfy customer compliance requirements without significant adverse effects on his engineering and technical support staff. By testing how well . . .

For Security & Risk Professionals

Inquiry Spotlight: Identity And Access Management, Q4 2008

by Andras Cser, October 6, 2008

Identity and access management (IAM) continues to be a major topic of interest for security professionals. Between July 2007 and June 2008, Forrester's security and risk management team fielded 1,798 inquiries on a variety of topics — 291 of which were . . .

For Security & Risk Professionals

A US National ID Begins To Take Root

WHTI, EDL, And REAL ID

by Geoffrey Turner, July 21, 2008

In the aftermath of the Al Qaeda attacks on 9/11, the US government realized that the lack of effective identity credentials for use in domestic air travel was a contributing factor in the attacks' effectiveness. Several initiatives have since been launched . . .

For Security & Risk Professionals

Market Overview: Strong Authentication For Enterprises In 2008

Securing The Doors To Your IT Environment

by Bill Nagel, July 16, 2008

Security professionals have long known that passwords are no longer sufficient to act as the sole means of gatekeeping access to enterprise network and data resources. Increasingly, they're putting that knowledge into action: More than half of the enterprises . . .

For Security & Risk Professionals

Forrester TechRadar™: Identity And Access Management, Q2 2008

Market Seeks Solutions That Support Business And IT Flexibility And Compliance

by Andras Cser, June 18, 2008

Identity and access management (IAM) continues to be a fragmented field of disjointed technologies with difficult and expensive implementation cycles and even more costly efforts in the wake of bad technology decisions. Products that give quick answers . . .

For Security & Risk Professionals

Topic Overview: Identity And Access Management

by Andras Cser, April 14, 2008

Identity and access management (IAM) is the entire aspect of maintaining a person's complete set of information, spanning multiple identities and establishing the relationship among these various identities with the goal of improving data consistency, . . .

For Security & Risk Professionals

Extending Mobile Identity Beyond Authentication

Banks, Mobile Operators, And Vendors Team Up For SIM Card-Based Security

by Bill Nagel, April 11, 2008

With mobile phones reaching saturation levels in many countries, banks and other service providers are taking a second look at providing financial and commercial services over the mobile channel. Mobile banking and PKI both flamed out spectacularly in . . .

The State Of FFIEC Compliance: Indecision And Worry

But Consolidation Will Bring Clarity To The Industry's Ultimate Direction

by Jonathan Penn, May 5, 2006

At the half-way point toward the deadline for FFIEC compliance, most banks have not yet acted on selecting, much less implementing, solutions to strengthen online authentication. When it comes to picking a technology to improve online security, banks . . .

VeriSign Goes VIP

A Good Alternative, But Not The Consumer Authentication Panacea

by Thomas Raschke, April 7, 2006

VeriSign recently introduced its VIP service, which includes both a shared two-factor authentication service and a fraud detection service. While the concept is not new, its non-proprietary approach nevertheless holds the potential to provide simple, . . .

Strong Authentication And Enterprise Single Sign-On Go Hand In Hand

by Jonathan Penn, September 21, 2005

Use of strong authentication for employees is proliferating, fueled by regulatory and partner security requirements, hackers' exploitation of password weaknesses, and government initiatives around homeland security. The implementation challenges of strong . . .

ActivCard Acquires Protocom: Good Move

Upgrade To Enterprise Single Sign-On Boosts ActivCard's Strong Authentication

by Jonathan Penn, August 1, 2005

The acquisition of a leading enterprise single sign-on (eSSO) vendor gives ActivCard the necessary technical grease to ease its strong authentication solutions into enterprises and government organizations. With eSSO, ActivCard gains a notable advantage . . .

Bank Of America's Strong Authentication Will Protect Online Customers

by Catherine Graeber, Jonathan Penn, June 29, 2005

Bank of America (BofA) is set to begin the rollout of a two-factor authentication service for its online customers. By using advertising to educate consumers on the importance of banking with a firm that offers strong authentication to protect the security . . .

Strong Authentication Kills Account Aggregation

by Martha Bennett, June 27, 2005

Introducing two-factor authentication for access to online banking services would be the death knell of account aggregation services as they are implemented today. Any service that relies on a static combination of user name and password(s) simply would . . .

Authentication Remains Mixed But Strengthening, And eSSO Picks Up

by Laura Koetzle, May 13, 2005

Recently, Forrester surveyed 200 technology decision-makers about their firms' plans for security in 2005. Firms continue to employ a mix of techniques for authenticating employees and customers. While 84% of our 147 respondents still think good password . . .

What To Look For In Consumer Strong Authentication Solutions

by Jonathan Penn, March 31, 2005

Online fraud and identity theft are growing plagues to eCommerce and are eroding consumers' trust in the Internet. In response, some organizations — especially financial institutions — are evaluating strong authentication solutions to protect customers' . . .

Strong Authentication: Not Perfect, But The Best Single Option We've Got

by Jonathan Penn, March 18, 2005

Despite comments from an industry luminary to the contrary, strong authentication remains the most important weapon in our arsenal for fighting identity theft and protecting the privacy of customers' data. As companies think about their efforts to improve . . .

E*TRADE Battles Online Fraud With Strong Authentication

by Catherine Graeber, Jonathan Penn, March 15, 2005

E*TRADE is addressing growing consumer concerns about online security by offering two-factor authentication tokens. Forrester applauds E*TRADE for taking this step and believes the firm's move will accelerate strong authentication offerings by other financial . . .

Strong Authentication Made Simple

Entrust IdentityGuard Protects Against Online Identity Theft

by Jonathan Penn, November 19, 2004

Entrust IdentityGuard is a promising approach to strong authentication of online consumers for financial firms, ISPs, and major retailers. Its high security, low cost, ease of use, and flexibility make it well suited to the challenges of strong authentication . . .