![\"security](\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/By-the-numbers-IAM-Mod.jpg\")
<\/p>\n<\/p>\n
It\u2019s a question that haunts so many cybersecurity professionals across enterprises of all sizes when deploying an Identity Management solution<\/a>: do you emphasize security or convenience?<\/span><\/p>\n This question may appear simple on the surface. After all, shouldn\u2019t security always come first when it comes to Identity Management? If enterprise credentials fall into the wrong hands, then your data may end up for sale on the black market or broadcasted for the all the world to see. The financial and legal headaches from the resulting fines, consultations, and reputation damage in the wake of a data breach is enough to make cybersecurity professionals and executive alike wary of making anything easier for hackers. \u00a0<\/span><\/p>\n Credentials are already a lucrative target for the digital criminal: <\/span><\/p>\n 81%<\/b> of confirmed data breaches in 2017 were due to weak, reused, or stolen passwords, according to a study by LastPass. <\/span><\/p>\n 63%<\/b> of confirmed data breaches involved weak stolen or default passwords, according to a separate study by Verizon.<\/span><\/p>\n 19% (nearly \u2155)<\/b> of enterprise professionals use poor quality passwords or shared passwords, according to a study by Preempt.<\/span><\/p>\n Adding onto these appropriate fears is that the idea that making an identity management solution too convenient plays into the hands of rogue or ex-employees with ill intent. The latest statistics justify those fears: \u00a0\u00a0<\/span><\/p>\n 60%<\/b> of all attacks conducted by insiders, according to IBM. <\/span><\/p>\n 75%<\/b> of these attacks were conducted with malicious intent, according to those same findings.<\/span><\/p>\n Furthermore, any retailer or enterprise with a customer-facing aspect also need to consider their enterprise\u2019s identity management solution as part of their efforts to secure public trust. In addition to quality products and services, security is an increasing customer demand: <\/span><\/p>\n 67% <\/b>of consumers are concerned about their online identities while shopping or banking, according to a survey by BetaNews. <\/span><\/p>\n 51%<\/b> of consumers in that same survey said that news of data breaches changed the way they conducted their business online.<\/span><\/p>\n 50%<\/b> would be okay with providing even more authentication factors when verifying their identities online, according to Crossmatch. \u00a0<\/span><\/p>\n It seems so straightforward, but very little is in identity management or in cybersecurity as a whole is so simple. The problem is that users even in the most prestigious enterprises will pick the most convenient option, even if it compromises the security of their credentials and their business. Perhaps this is not surprising; humans gravitate to a state of maximum efficiency naturally, and corporate culture does reward speed. Combined with password fatigue, perhaps the results are not so surprising: <\/span><\/p>\n 36 minutes<\/b>\u2014the time per month the average employee types in their credentials, according to LastPass.<\/span><\/p>\n 154 times a month<\/b>\u2014the number of times an employee must type in their credentials, according to the same findings. <\/span><\/p>\n 39% <\/b>of users find it challenging to keep up with all the passwords for all their online accounts according to Pew Research. <\/span><\/p>\n 20% to 30%<\/b> of help desk tickets concern lost or forgotten passwords, according to Gartner. <\/span><\/p>\n 91%<\/b>\u2014the percentage of users who know the dangers of reused passwords, according to Pew Research. <\/span><\/p>\n 61%<\/b>\u2014the number of users who do so anyway, also according to Pew. <\/span><\/p>\n A takeaway from all these findings is that even with the most comprehensive identity management solution, your employees and third-party users may still constitute the weakest link in your security. Not necessarily from malice either, but from human laziness. <\/span><\/p>\n The implied ideal is a solution that balances security and convenience. Part of the recent buzz around biometrics<\/a> as a replacement for passwords stems from the solution being seen as the bridge between the two values. <\/span><\/p>\n According to a Keeper Security survey, <\/span>66%<\/b> of respondents believe biometrics are a strong tool that are both secure and convenient. <\/span>38.9%<\/b> of respondents think biometrics are more secure than passwords. <\/span>70% <\/b>of respondents find biometrics easier than passwords, according to a Visa survey. <\/span><\/p>\n The problem is that biometrics may not be as secure as the public perception of them has leads many to believe. After all, if biometric data is compromised users can\u2019t simply change them for the future: <\/span><\/p>\n 46%<\/b> of respondents felt biometrics are more secure than passwords or PINS, according to AYTM Market Research. <\/span><\/p>\n 1.2 billion people<\/b>\u2014the number of people left vulnerable in a hack on India\u2019s Aadhaar biometric database. <\/span><\/p>\n The lesson from all this is that, if you are considering an identity management<\/a>, privileged access management<\/a>, or biometric solution, you need to weigh the security benefits with how easy it will be for your employees to adapt to the solution. Training them in the solution\u2019s policies and nuances will be as necessary as selecting the solution in the first place. Additionally, it is essential to evaluate your employees\u2019 security practices and enforce password best practices across your enterprise. \u00a0<\/span><\/p>\n The alternative may be letting your employees relax themselves into a data breach.<\/span><\/p>\n It\u2019s a question that haunts so many cybersecurity professionals across enterprises of all sizes when deploying an Identity Management solution: do you emphasize security or convenience? This question may appear simple on the surface. After all, shouldn\u2019t security always come first when it comes to Identity Management? If enterprise credentials fall into the wrong hands, […]<\/p>\n","protected":false},"author":41,"featured_media":2278,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[499,237,356,16,112,70,124,91],"acf":[],"yoast_head":"\n
Widget not in any sidebars
<\/p>\n
Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"