Hi All,
ENISA just published Remote ID Proofing - Good practices
context. Therefore, the need for secure and reliable identity proofing services, deployable quickly, at scale and in a cost-efficient manner intensifies, since it is a key enabler for electronic transactions in the Single Digital Market, and due to the increasing volume and sophistication of attacks.
Through this report, ENISA attempts to accomplish the following strategic goals, in the domain of trust services and electronic identification:
• to increase stakeholders' awareness;
• to assist in the risk analysis practices in the rapidly changing threat landscape of identity proofing;
• to contribute to the development of stronger countermeasures, enhancing the trustworthiness and reliability of remote identity proofing (RIDP) methods.
The motivating factors to produce this report were:
• the recent developments in the attack landscape, causing concerns about the trustworthiness of identity proofing;
• requests from various stakeholders regarding up-to-date information and guidance on defensive good practices.
Based on the above, the scope of this report builds and expands on the 2022 ENISA report Remote Identity Proofing – Attacks & Countermeasures (2), in an effort to bring novel types of threats and wider ecosystem concerns to the foreground.
------------------------------
Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA, CSA Research Fe
------------------------------