YubiKey secures remote workers during COVID-19 as government-approved alternative to PIV and CAC cards

 

In the matter of just one week, Google reported that it saw more than 18 million daily malware and phishing emails related to COVID-19. That’s an astonishing number, and one that is not likely to slow down any time soon.

For organizations across the globe, it is imperative to quickly, securely, and affordably fill existing security gaps to effectively support remote workers. For government agencies, the stakes are even higher. It is critical to protect and sustain our government infrastructures in a time when many citizens are relying on these services more than ever before.

Preventative measures against phishing are not new, but scaling them quickly across an organization is. This is uncharted territory for many government agencies, and the Personal Identity Verification (PIV) and Common Access Card (CAC) authentication infrastructure lacks the convenience and flexibility required to support a rapid shift to remote work environments. While PIV and CAC set a high bar for security, they rely on in-person identification to issue credentials — an impractical requirement when servicing droves of new remote workers or renewing recently expired credentials.

US government releases guidance on securing remote workers

Recognizing the immediate need for increased security without disrupting productivity, the United States White House Office of Management and Budget (OMB) released a directive for the broader government. The memo acknowledges three main points:

  1. Not all agencies may be able to issue PIV credentials during the time of remote work.
  2. Agencies are directed to use the breadth of available technology capabilities to fulfill service gaps and deliver mission outcomes.
  3. Agencies should be prepared to issue an alternate credential or authenticator for physical and logical access.

YubiKey approved as PIV alternative for strong authentication 

For federal entities, we know that this means finding applications and solutions — like the YubiKey — that already have the government seal of approval and a federal terms of service agreement to enable rapid and seamless deployments.

“A FIDO security key can help bridge the gap,” explains Jeremy Grant, Managing
Director of Cybersecurity at Venable, and former Senior Advisor to the Obama Administration’s National Strategy for Trusted Identities in Cyberspace.

“Much like the PIV card, FIDO security keys leverage public key cryptography for authentication, which can’t be phished — an important benefit at a time when we’re seeing an explosion of COVID-related phishing attacks,” continues Grant. “Agencies can mail FIDO security keys directly to employees needing strong authentication, and because they work via USB and NFC, they don’t require a specialized reader as PIV cards do.”

FIDO security keys are 1 of 3 government-approved alternate authenticators, according to the Department of Defense. This guidance was released as early as 2018, demonstrating that the US government recognized the need for agile, adaptable, and affordable security solutions far before COVID-19.

Global governments recommend multi-factor authentication to protect remote workers  

Efforts from the US government are underscored by similar initiatives by many other leading government agencies around the world. For example, the British NCSC (National Cyber Security Centre) and European Union Agency For Cybersecurity (ENISA) both issued guidance on best practices to secure citizens and employees working remotely, and strongly recommended multi-factor authentication (MFA) as a top priority.

For more information on the YubiKey as a federally-approved authentication solution, tune into our latest on-demand panel webinar with Danelle Barrett, former US Rear Admiral, and Director Navy Cyber Security and Deputy Chief Information Officer.

Additionally, read how FIDO2 is aiding eIDAS (electronic identification, authentication and trust services) as the legal basis for cross-border interoperability of electronic identification, authentication, and electronic signatures amongst EU Member States.

To find out more additional information about YubiKey, please go to our Website at https://dtasiagroup.com.hk/yubikeys/ or if you have any enquire about Yubikey, please contact us and visit our DT Asia HK Facebook at https://www.facebook.com/dtahongkong/ to find out more.

———————————-

Content retrieved from our partner: https://www.yubico.com/blog/us-government-approves-yubikey-as-piv-and-cac-card-alternative-amidst-covid-19/.

 



Related Articles

Yubico and RSA team to deliver FIDO-based authentication to enterprises

As more organizations undergo digital transformation initiatives, identity and access management (IAM) is becoming more critical than ever before. IAM sits at the heart of every business, which is why Yubico is excited to announce a new partnership this week at Gartner IAM Summit with one of the longest standing IAM vendors on the market: RSA. YubiKey for […]

Yubico’s authenticator app now supports NFC for iOS devices

60 SHARES Share on Facebook Tweet Follow us Share Share Share Share Share

Three measures to protect personal information in Hong Kong

At this time in Hong Kong today, personal protection is very important. In addition to protecting personal safety as much as possible, even personal data security must be protected, because many criminals will use various excuses to try to obtain your personal data, and even Will do everything possible to use every method to steal […]

一個YUBIKEY來終結你混亂的密碼管理

儘管還有其他身份驗證工具,但YubiKeys在很大程度上是物理雙因素身份驗證運動的代表。不幸的是,到目前為止,世界上最知名的智能手機也無法使用它。但是今天製造商Yubico發佈了第一個用於iphone和ipad的閃電端口YubiKey。

【網絡保安】瑞典科企推多重保安USB「Yubikey」 加強電腦保障

公眾近年關注網絡安全問題,陸續選擇啟用以雙重驗證或多重驗證方式,加強個人私隱保障。更有瑞典保安科技公司 「Yubico」推出保安USB「Yubikey」,用戶只須將該USB插上電腦,無須連接網絡及用電,便可多加一重指紋驗證保障。

Contact DT Asia Group Hong Kong

Address: Unit 929, Kowloon Bay Industrial Centre,
15 Wang Hoi Road, Kowloon Bay, Hong Kong
Tel: +852 58010001
Emailsales@hk.dtasiagroup.com

Like Our Facebook Page :)