There are many instruments, “tools and rules”, of trust within the identity ecosystem. Some are known and proven while others are emerging and having an immediate impact. The challenge is aligning technology tools and legal rules to deploy identity management services globally.
This presentation will provide a pragmatic perspective of how efforts focused on the business, legal and technical aspects of the identity ecosystem are being advanced by industry leaders.
This overview of open identity standards along with new tools such as self-certifications and registration enhances online transactions via trust frameworks. We’ll review how governments are partnering with industry to advance national identity initiatives using the GOV.UK Verify program as a benchmark for public-private partnerships in the US and Europe.
Key Takeaways:
Use of external services providing federated identity management, access, credentials and authentication is growing with increased adoption of cloud service delivery models. Risk is introduced to any organization that ‘outsources’ critical services. By using an external service provider, even one in the same overall organization, the reliant organization becomes dependent on the security, operational stability and reliability of the external provider.
We will explore how systems operated according to standards of practice can be assessed and certified to demonstrate that they are capable of delivering the promised critical services. Use of 1st, 2nd and 3rd party assessments play a critical role in federated architectures and trust frameworks. Specific examples from assessment schemes and standards for digital identity practices will be discussed.
Key Takeaways
Digital identities have the potential to unlock huge savings in how services are delivered to us, but only if they are treated as a national asset and part of the national digital infrastructure, not if we have a diverse range of schemes. This presentation will share our opinions on why we are still a long way from being able to share a digital identity created in one market with another and thoughts on who should set the agenda.