THE USE OF SECURE IDENTIFICATION 2
Abstract

Organizations today rely on information-sharing processes that are so manually intensive, duplicative, and inefficient that they cannot scale to meet critical computer network defense requirements of speed, agility, relevance, and accuracy. This gap ultimately translates into lost opportunities to avoid serious losses, improve security practices, prevent attacks, and predict threats. The aim of this report is to review the popularity and affordability of Secure Identifications (ID) devices when logging into our work laptops, portable devices, and how staying connected is now easier and safer than ever. Many of us have received an e-mail, either from a web portal we frequent, or from the IT department, telling us that we need to reset our password due to a security breach. In the event of a smash and grab attack that compromises user passwords, having users reset their passwords is one of the first steps in remediation. There’s no question that the old password is now gone, and should most definitely be changed. As employees, we welcome the simplicity of the portable platforms and continue to increase device usage for everything from maintenance, inventory, pay/finance, and professional development learning courses. However, as more personal and sensitive data is available on mobile devices, fraudsters are quickly developing ways to exploit this new platform. A staff survey on the use of Secure Identification on company devices was conducted. The results indicate that the majority of our staff agrees that using a Secure ID for our computer log-in to be more beneficial and secure.

THE USE OF SECURE IDENTIFICATION 3
The Use of Secure Identification:
A Review of the Security Virtually everything against which assets require protection involves people. Digital and physical attacks are all created and carried out by people. It is therefore essential to be able to clearly and accurately identify those who should have access to what belongs to you and the company. Such identification capabilities are carried out by a secure identification (ID) system. Desktop and laptop users must make use of business loaded Secure ID Digital Key software to check all data on their PCS’s, download data or data transferred via CD/DVD disks and portable storage devices. All employees must be logged-in the network servers using secure identification; users must not be allowed to disable such software. Administrators can maintain better control of PC’s by implementing group policies as per departmental functions so that users cannot tamper with configurations. Always make sure that the latest updates/patches for all operating systems and application have been installed thus ensuring any known vulnerabilities have been taken care of. Clearly creating systems that provide protections in addition to, or instead of, passwords are a great way to mitigate this risk, especially if those systems can take only a minor or even negligible dependency on a password provided by the user. In addition to systems such as those, users must also be sufficiently educated on how their password histories enable attackers to predict their next passwords, so that they are aware of just what they lost when a password breach occurs and how they can
THE USE OF SECURE IDENTIFICATION 4 protect themselves, their own personal accounts, and the corporate account to which they have been entrusted with privileged access. Keeping proprietary knowledge away from competitors is essential to maintaining alliance advantage.
Method
This research was conducted by questionnaire and review of staff members that were issued a RSA Secure ID token to use on work computers. A total of 50 questionnaires were distributed. The questionnaire used a scale to assess common workplace sites such as MAXIMO Maintenance, Global Portal, E-Room, and Employee Self Services (ESS) when employees are logged-in securely. Survey collection boxes were located at each work site for a period of six weeks. No personal information was collected; the survey was voluntary and anonymous.
Results
Use of Secure ID Strongly Agree % Agree % Don’t Like % Disagree % Either Way % Easy to use 80 10 5 0 5 Slight problem 4 5 0 90 0 Disruptive 5 5 5 85 0 Safer 85 5 0 10 0
There was a 100% response rate to the questionnaire. A breakdown of the responses is listed below in Table 1. This survey unmistakably shows that every employee surveyed agreed that using Secure Identification is considered to be the safest and most secure source for company and personal information.
Table 1

THE USE OF SECURE IDENTIFICATION 5
Discussion
Applications and users are increasingly distributed. Users demand access to important resources regardless of location or device. These types of security identification systems will allow us to maintain security, extend strong authentication to all of our applications with a single implementation and create stronger access methods that meet our corporate security requirements.
Conclusion
As shown in this report, secure ID systems offer significant benefits for individuals and businesses. Employees using smart ID enjoy greater satisfaction through faster, more convenient and more secure access to information and services. The efficiency and security features provided through the use of smart ID systems would enable our company to enhance security while also improving services and reducing operating costs. Secure identification provides an optimal technology platform for a secure ID system that can meet our business requirements for secure and accurate identification verification.
Recommendations
It is recommended that Computer Science Corporation purchase a "RSA Secured” Integration Kit for each site assigned to this contract. Each kit supports all Secure ID authenticators, hardware tokens, software authenticators, smart phone tokens, SMS-based solutions and more. It also supports Secure ID Authentication, Next Token Code and PIN Reset. Customizable HTML templates are included, allowing organizations to customize the user experience.
THE USE OF SECURE IDENTIFICATION 6
References
Transforming Expectations for Threat-Intelligence Sharing by Kathleen M. Morlarty URL: http://www.emc.com/collateral/emc-perspective/h12175-transf-expect-for- threat-intell-sharing.pdf
The Password Reset Conundrum- by Kenneth Ray,URL:https://blogs.rsa.com/the- password-reset-conundrum/
Smart Card Alliance Report- Secure ID Systems: Building a Chain of Trust, 2004 URL: http://www.library.ca.gov/crb/rfidap/docs/SCA-secure_id_systems.pdf
Action Plan for Small Enterprises by Author: Rashmi Knowles URL: https://blogs.rsa.com/action-plan-for-small-enterprises/
Developing Security Policies for Protecting Corporate Assets by Jasu Mistry; Security Essentials Version 1.2d; URL: http://www.sans.org/reading- room/whitepapers/policyissues/developing-security-policies-protecting-corporate- assets-490?show=developing-security-policies-protecting-corporate-assets- 490&cat=policyissues
RSA FraudAction Research Labs – Speaking of Security; Anatomy of an Attack, 2013 URL: https://blogs.rsa.com/anatomy-of-an-attack/