{"id":2300,"date":"2018-02-02T10:00:18","date_gmt":"2018-02-02T14:00:18","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=2300"},"modified":"2018-02-15T11:50:59","modified_gmt":"2018-02-15T15:50:59","slug":"4-questions-ask-selecting-biometrics-solution","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/","title":{"rendered":"Top 4 Questions to Ask Before Selecting A Biometric Authentication Solution"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2301\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png\" alt=\"4 questions to ask when selecting a biometrics solution\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod-300x150.png 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod-768x384.png 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod-540x270.png 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod-162x81.png 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod-360x180.png 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">As Identity Management and Privileged Identity Management march inevitably into the future, the password\u2014once the end all and be all of authentication\u2014seems to be rusting away before our eyes. Indeed, traditional passwords look like a far uglier and <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/numbers-security-conveince-iam\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">less secure solution<\/span><\/a><span style=\"font-weight: 400\"> when compared to their newer, more elegant, and possibly more secure challenger: biometrics. \u00a0According to a <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/hacks-attacks-counters-weekend-review\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">study by Visa<\/span><\/a><span style=\"font-weight: 400\">, 70% of American respondents find biometrics more convenient than passwords; a separate <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/survey-reveals-public-identity-management-trends\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">study by Keeper Security<\/span><\/a><span style=\"font-weight: 400\"> found that 66% of respondents consider biometrics a secure and convenient authentication tool. IBM Security\u2019s most <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/top-4-authentication-findings-ibms-future-identity-study\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">recent global survey<\/span><\/a><span style=\"font-weight: 400\"> indicates that biometrics\u2019 popularity are contributing to a global revolution.<\/span><\/p>\n<br \/>Widget not in any sidebars<br \/>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">So it seems like the logical conclusion for enterprises to start considering a transition to biometric authentication for their employees and privileged users. However, as with any cybersecurity solution, you should not select and deploy biometrics thoughtlessly or as a quick-fix to an immediate problem. Such a patchwork approach to cybersecurity often results in neglected problems and integration issues that could make life harder for your cybersecurity team\u2014and malicious activity going undetected until it is far too late. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Before you select and deployment a biometric authentication across your enterprise, ask yourself and your potential biometric solution providers these 4 questions: \u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>1. Who has access to the biometric data? How is it stored?<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Biometrics are considered more secure than passwords by a growing plurality, but the input data of each user\u2019s fingerprint, voice, and facial features must still be stored somewhere for the software to recognize it. And where there is storage there is the potential for storage issues; improper or unsecured databases can leave your employee\u2019s or customer\u2019s authentication data in jeopardy. For a small insight into the panic this can elicit, look no further than the recent expose on Aadhaar, the Indian government\u2019s civilian biometric database, revealing potential security flaws. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The core of this concern is a simple yet often-overlooked principle: biometric authentication data can\u2019t be changed the way a password can. A fingerprint remains the same fingerprint, regardless of who has that information. So if the fingerprint data is stolen, all the accounts associated with that fingerprint will be compromised\u2014potentially permanently. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, before selecting a biometrics solution, you must first inquire as to how you enterprise\u2019s authentication data be stored. Will it be on a separate server or network? How will it connect to other servers, networks, and databases? And who will have access to that database? Furthermore, it is important to inquire about how the biometric data will be verified. What is the vendors\u2019 rate of false positives? And what are the mechanisms for recognizing a potential false positive?<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">These aren\u2019t idle questions; according to the IBM study, 55% of respondents were concerned with their privacy a la the collection and use of biometric data. 50% were worried about false positives. So investigating the storage of your biometric data will not just save your enterprise possible heartache\u2014here manifested as massive legal fines in remunerations and consultations\u2014later on. It will also help you maintain your employees\u2019 and customers\u2019 trust in your enterprise security policies. \u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>2. How will I balance security and convenience in my biometric authentication policies?<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The IBM Security survey does suggest that security is actually more important to consumers and employees than convenience in their authentication, bucking conventional wisdom on the subject. But even if convenience is not the end-all-and-be-all it has been purported to be, it remains an important factor in whatever solution you select. Employees and customers may push back against inconvenient security initiatives, leaving you vulnerable. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In that regard, biometric authentication is certainly considered more convenient and more secure than passwords. However, cybersecurity best practices suggest that biometrics are best as a component, rather than the total, of a layered security \u00a0policy, such as two-factor and multi-factor. This ensures that hackers will need at least two disparate pieces of information to gain access to your enterprise\u2019s data, which will deter many and frustrate others in their malicious efforts; it even comes with the added bonus of limiting the number of false positive authentications. \u00a0\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">So when selecting a biometric authentication solution, see how they support multi-factor authentication and consider how your employees will respond to your new biometric security policies. Additionally, you might want to consider your current business processes and infrastructure, and how you can integrate biometrics into them for easy adoption across your enterprise. \u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>3. What kinds of data, applications, and privileges am I looking to secure with biometrics? <\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">While all of your enterprise\u2019s data is important, not all data is created equal. Some data\u2014personal identifying information of your employees, corporate and customer financial data, etc.\u2014require an extra layer of security. The same goes for certain enterprise applications and privileges; some will need the maximum amount of security and others may not need as much authentication. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, as you select a solution, consider where you need a biometric authentication process most. Do you need your entire enterprise and every database secured in such a way? Or will only a few processes and applications need such scrutiny? \u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>4. How will your biometrics be deployed across your endpoints and enterprise?<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Let\u2019s say that you want to incorporate fingerprint biometrics into you security policies. The question becomes how you will actually have employees scan their fingerprints. Many modern laptops have fingerprint scanners built into them, and many mobile devices have such technology standard in their design. But will those devices work with your selected solution? Will you then need to update every endpoint in your enterprise to have the latest models of mobile device and endpoint? Or will you buy a specialized fingerprint scanner for each device? This is as much a budgetary consideration as it is one of coordination.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">On the flip side, if you want a different form of biometric authentication such as facial recognition or iris recognition, you\u2019ll need specialized equipment or programs for that as well. Deployment is a long process, which requires taking into account your physical location, the tasks you wish to protect, the expected number of end users, the storage of existing data, and the strengths and weaknesses of each authentication factor. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Biometrics can be a boon to your enterprise, but you must be ready to take on the responsibility of choosing the right solution. Never rush in cybersecurity; that\u2019s a fast way to a security vulnerability. \u00a0<\/span><\/p>\n<br \/>Widget not in any sidebars<br \/>\n","protected":false},"excerpt":{"rendered":"<p>As Identity Management and Privileged Identity Management march inevitably into the future, the password\u2014once the end all and be all of authentication\u2014seems to be rusting away before our eyes. Indeed, traditional passwords look like a far uglier and less secure solution when compared to their newer, more elegant, and possibly more secure challenger: biometrics. \u00a0According [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":2301,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,237,16,70,91],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>4 Questions to Ask Before Selecting A Biometric Authentication Solution<\/title>\n<meta name=\"description\" content=\"Before you select and deployment a biometric authentication across your enterprise, ask yourself and your potential solution providers these 4 questions.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/\",\"name\":\"4 Questions to Ask Before Selecting A Biometric Authentication Solution\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png\",\"datePublished\":\"2018-02-02T14:00:18+00:00\",\"dateModified\":\"2018-02-15T15:50:59+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Before you select and deployment a biometric authentication across your enterprise, ask yourself and your potential solution providers these 4 questions.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png\",\"width\":800,\"height\":400,\"caption\":\"4 questions to ask when selecting a biometrics solution\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Top 4 Questions to Ask Before Selecting A Biometric Authentication Solution\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"4 Questions to Ask Before Selecting A Biometric Authentication Solution","description":"Before you select and deployment a biometric authentication across your enterprise, ask yourself and your potential solution providers these 4 questions.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/","url":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/","name":"4 Questions to Ask Before Selecting A Biometric Authentication Solution","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png","datePublished":"2018-02-02T14:00:18+00:00","dateModified":"2018-02-15T15:50:59+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Before you select and deployment a biometric authentication across your enterprise, ask yourself and your potential solution providers these 4 questions.\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/palm-print-mod.png","width":800,"height":400,"caption":"4 questions to ask when selecting a biometrics solution"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/4-questions-ask-selecting-biometrics-solution\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Top 4 Questions to Ask Before Selecting A Biometric Authentication Solution"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2300"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=2300"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2300\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2301"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=2300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=2300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=2300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}