Federal Agencies Need to Strengthen Online Identity Verification Processes
Remote identify proofing is the process federal agencies and other entities use to verify that the individuals who apply online for benefits and services are who they claim to be. If the applicant responds correctly to personal questions, their identity is considered to be verified. However, data stolen in recent breaches could be used fraudulently…
The GAO report finds that many federal agencies still use knowledge-based verification (KBV) for online identity proofing, despite its growing vulnerability due to large-scale data breaches.
The report recommends discontinuing KBV, urges NIST to provide clearer guidance on secure alternatives, and calls for OMB to require agencies to report on their progress in adopting more secure identity verification methods.
Share this Resource:
