The four levels of identity assurance and risk assessment can be a contentious topic among those in the identity industry. NIST is proposing some significant changes to SP 800-63, including eliminating a level two, deprecating some authentication mechanisms and an array of other changes.

Delta Air Lines and CLEAR partnered to bring CLEAR’s expedited security experience to more airports; Janrain announced that Jim Kaskade will succeed Larry Drebes as the company’s CEO; The Greek Ministry of Interior is validating ePassports and driver licenses using tech from Novatron; Versasec and PrimeKey Solutions partnered.

The Smart Card Alliance has formed an Internet of Things Security Council to develop and promote best practices and provide educational resources on implementing secure IoT architectures; Safety concerns have put Uber under fire in many markets and in an attempt to alleviate that the ride sharing company is going to deploy facial recognition to authenticate drivers; GlobalPlatform and the FIDO Alliance have signed a Memorandum of Understanding.

The Digital ID and Authentication Council of Canada (DIACC) isn’t Verify in the UK or the National Strategy for Trusted Identities in Cyberspace in the U.S. The council is working with those efforts but at the same time is an initiative for Canadian citizens.

Mobile driver licenses are coming. One state is piloting the technology and many other states are interested but the hurdles to implementation are numerous. But the ubiquitous plastic card that resides in the wallets of most people 16 years of age and older is in for a makeover, one way or another.

The Cloud Security Alliance released a report looking at identity trends in the enterprise. While weak identity and access management is a concern, enterprises are starting to bolster these systems and administer policies that better protect networks and applications.

Exostar announced its risk management solution can help defense contractors with the capabilities they need to manage Defense Federal Acquisition Regulations Supplement; VASCO Data Security announced DIGIPASS SecureClick, a hardware authenticator that enables users to complete access to common online applications with the single click of a button; SecuEra Technologies has earned FIPS 201 certification and is now on the GSA Approved Products List.

To the surprise of no one in IT security, consumers are tired of passwords and therefore are engaging in risky behavior due to this weariness, according to a new survey.

Corporations can make employees jump through whatever hoops they desire to access secure networks and cloud-based applications but it’s different on the consumer side. Access needs to be secure and easy, not an easy task, and organizations are starting to realize that enterprise IAM and consumer IAM are two totally different animals.

Cost isn’t the obstacle it once was when it comes to identity and authentication. Enterprises are starting to reconsider cybersecurity and instead of focusing on firewalls and perimeter detection, look at the security around credentials.