Digital Government

With hacks on the rise, is it time to revisit a national ID?

Our process for verifying people's identities is broken, leading some to revisit the idea of a national ID system. But politics, cybersecurity and other concerns loom large in the debate.

Acquisition

DOD releases unified cybersecurity standard for contractors

The Defense Department's Cybersecurity Maturity Model Certification framework is ready for public comment.

Cybersecurity

IRS identity theft enforcement activities plummet

In the latest sign enforcement has taken a back seat, a new audit finds that new identity theft cases at the resource-strapped agency have dropped by at least 75% since 2013.

Cybersecurity

CISA official touts data sharing in critical infrastructure

Where privately owned critical infrastructure providers had balked at sharing threat data five years ago, it's become now a critical, commercial necessity, according to CISA infrastructure official.

Cybersecurity

Watchdog: Hiring freeze increased cyber risk at State

An extended hiring freeze at the Department of State delayed key cybersecurity initiatives and placed highly classified information at risk, according to a watchdog report.

Cybersecurity

CBP defends facial recognition programs to Congress

An official argued that such programs largely automate the manual identity verification practices the government has done for decades, but a recent breach looms large.

Digital Government

Your personal data is too public for agencies to verify

The widespread loss and theft of data on Americans has made a once popular form of remote identity proofing obsolete, and agencies need to start looking into other options.

Cybersecurity

Thrift Savings Plan sees uptick in 2FA

TSP users are adopting two-factor authentication, with few opt-outs, officials said.

Cybersecurity

Watchdog: IRS needs new tech to fight fraud

A Government Accountability Office report flagged identity theft and unpaid taxes as two of the most pressing challenges facing IRS. Better tech and planning could help solve both.

Cybersecurity

Dot-gov site security erodes during shutdown

An internet security company identified expired security certificates on .gov websites.

Cybersecurity

DOJ preps major push around ID management

The Department of Justice is gearing up to build an extensive identity and access management portfolio for employees and contractors over the next three years.

Cybersecurity

IRS missed 11,000 compromised SSNs

An IRS office charged with monitoring and mitigating the impact of external data breaches is faltering when it comes to keeping track of the problem, according to an IG audit.

Cybersecurity

Will government embrace a new role in digital ID?

As data breaches and identity theft become increasingly regular parts of the news cycle, there is growing support for government taking a lead role in identity proofing. If it does happen, expect to see the Better Identity Coalition's Jeremy Grant showing the way.

Cybersecurity

DOD's new cyber strategy stresses election security, embraces commercial IT

The Defense Department's cyber strategy highlights infrastructure protection and greater reliance on commercial technology to stay competitive.

Cybersecurity

The IRS can do more with its fraud detection system

A GAO audit found that the tax agency's Return Review Program has made strides in recent years that can be applied to number of other enforcement activities.

Cybersecurity

Microsoft targets copycat influence websites

Microsoft went to court to take down websites it believes to be part of a foreign intelligence operation targeting conservative think tanks and the U.S. Senate.

Cybersecurity

NARA is doing great at email, website security. Maybe

An audit finds the National Archives and Records Administration is well on its way to complying with a DHS directive to boost email and website security, but the agency's measurements need improvement.

Cybersecurity

IRS closes in on industry-based fraud squad

The IRS is inching closer to operationalizing a public-private information sharing center to help prevent tax fraud including refund scams and identity theft.

Cybersecurity

In defense of DMARC

Clearing up some common misunderstandings about email authentication.