Over the last few years, the cyber security industry has undergone a paradigm shift from focusing solely on attack prevention to taking measures to identify and mitigate threats that have already managed to infiltrate perimeter defenses. Properly segmenting a network and ensuring the efficacy of access control policies is a primary factor in keeping security events from becoming high-profile breaches.

The Internet of Things promises many thing but also poses many threats. The security industry is trying to prepare for the influx of these devices by working together to create standards that ensure a secure IoT.

Virginia’s digital identity law may be the start of a trend. The law went into effect this month and aims to facilitate electronic commerce by arming citizens with an efficient and affordable means of strong multi-factor authentication by which to fight cybercriminals and identity thieves in the online environment. A UN agency is looking into digital identity policy, citing the Virginia law as an impetus.

In a large enterprise IT help desks can be bombarded with requests for account unlock and password reset. Enterprises should investigate solutions that can enable employees to do this on their own to ease help desk costs.

If all has gone as planned, providers of identity, credential and access management (ICAM) programs and tools to federal agencies will learn the government’s latest requirements for their products and services.

The surge in the use of adaptive authentication has many ramifications for general authentication, but perhaps the most interesting is its impact on elevated authentication. This is where elevated will see its second act.

For years authentication has been a thorny issue for banks and financial institutions, particularly in the world of mobile services. While some may tout scary, creepy authentication technologies there are plenty of options that will make mobile identification simple and secure.

The Security Industry Association Open Supervised Device Protocol (OSDP) will be a key piece of the SIA InteropFest at ISC West 2015. The access control specification has a history as an access control specification, offering interoperability and new functionality.

In the last several years, there has been a focus on the safety and security of airports, as the challenges these facilities face are ever evolving. Despite tight security in and around the gate areas, airport facilities are by their nature open to the public – a fact that poses a major hurdle when it comes to physical security.

There is a dichotomy between the authentication practices of an employee versus those of the consumer or home user. An employee is influenced by a paycheck and the corporate IT department and as long as they’re being paid, the IT department specifies and directs what type of authentication strength the employee is required to use.