Satisfying compliance requirements with passwordless credentials

OVERVIEW

Do you want to know how FIDO2 measures up against FedRamp High? Does it satisfy NIST Authentication Assurance Level 2 or 3? Learn how to interpret the standards and regulations and how you can map the various common credentials in the ecosystem to them, also learn how you can show compliance to your auditor when you use new passwordless credentials like FIDO2 keys.

Recent cyber-attacks are driving governments and regulated industries around the world to improve their Cybersecurity and ensure that baseline security practices are in place. Requiring MFA is no longer enough, there is a need to make sure it is a phishing resistant MFA. In this session we’ll explain NIST Special Publication 800-63-3 “Digital Identity Guidelines” pivotal role in shaping Identity regulation in US and around the world, we’ll dive into the requirements for meeting the various Authentication Assurance Levels and explain why not all MFA methods are created equal.

Presented By

EHUD ITSHAKI
EHUD ITSHAKI
Principal Program Manager, Microsoft