| Entities | |
| Topics and Issues |
In March 2022, the Better Identity Coalition and the American Council for Technology-Industry Advisory Council (ACT-IAC) jointly published a White Paper: Citizen Identity, Credential, and Access Management (ICAM); Government as an authoritative issuer and validator of attributes. According to the synopsis,
Identity, Credential, and Access Management (ICAM) plays a crucial role in managing and securing access to digital and physical resources. ICAM supports an organization’s mission by reducing the chances of successful cyber-attacks across the organization’s information systems and facilities. A well-structured ICAM program reduces costs, simplifies user management, secures access to information, and protects resources across organizations.
Some important findings of the Citizen Identity, Credential, and Access Management (ICAM) paper include:
- Knowledge-Based Verification/Authentication is not effective. The paper notes, “Public and private sector entities are moving away from KBV and knowledge-based authentication (KBA) in favor of other tools.” NIST itself has explicitly stated that “KBV cannot be used to satisfy the verification requirements for IAL2 or IAL3 in identity proofing.”
- Multifactor Authentication (MFA) should be “table stakes.” The paper says it should be “enabled for all accounts and built into the enrollment process.”
- Transparency is key for individual users. Individuals need to “know what data is being collected, how it’s being used, and how long it’s being stored.” That’s something that ID.me is committed to.