ACCESS MANAGEMENT UTILITY SERVICE via SECOND FACTOR AUTHENTICATION (2FA)

Transcription

1 ACCESS MANAGEMENT UTILITY SERVICE via SECOND FACTOR AUTHENTICATION (2FA)

2 Things You Should Know About Cyber Crime 1 Industry Cyber crimes are headlining everyday and everywhere. 2 Cyber hackers do not discriminate who they hack. Small Large Accommodation Administrative 8 7 Education 2 10 Entertainment 8 1 Finance Healthcare 6 1 Information Management 1 3 Manufacturing 7 33 Retail Professional Source: Verizon Enterprise Solutions, 2013

3 3 4 Cyber bugs evolve exponentially. 1990: 1,300 Malware 2010: > 200 mil Malware Hackers are not just after your money. 5 We only got ourselves to blame. 80% of IT professionals surveyed agreed that the carelessness of end users is the biggest threat to organizational security, even more so than malware infections.* *ITIC/KnowBe4 Security Deployment Trends Survey 2013

4 Password is NOT 6 enough Unless your password is CrtUlh46ag95BBnjs, that might just slow hackers down. Truth is, we are ALL lax in our almost-neverchanging-easy-toremember-password practice. You never need to remember One-Time password. Its validity is time limited. It is easily called on at a click of a button.

5 7 Cyber security tools need NOT be expensive nor complicated to implement or use! Total Costs of Ownership One-time costs Recurring service costs Authentication software license fees for perpetual licenses Deployment costs, Upfront costs for 2FA devices (such as tokens or mobile phone applications) Up to US$423,875* Annual software maintenance fees On-going administration costs Help desk personnel Token renewal costs Distribution costs Telco SMS charges Compliance audit and upgrades Up to US$118,438* *Symantec Two-Factor Authentication: A Total Cost of Ownership Viewpoint 2013 VS Assurity provides the authentication servers and tokens. No more worries about audits, upgrades and down time. Assurity mitigates high cost and complex implementation concerns. Assurity operates under world-class standards and complies to compulsory NATIONAL standards and regulations like MAS TRM.

6 Who is Assurity Trusted Solutions? The National Authentication Framework (NAF) is part of the in2015 Masterplan, a blueprint by the Infocomm Development Authority of Singapore (IDA) to navigate Singapore s transition into a secured intelligent global nation. The NAF was developed to ensure greater security to the nation s IT infrastructure by providing convenient and cost-effective authentication utilities for businesses to leverage on. Assurity Trusted Solutions, wholly owned by IDA, provides a holistic solution to your IT security concerns without busting your budget.

7 Accessing Authentication from a Utility Network Subscribing Authentication Utility for Cost Effectiveness and Greater Convenience to your Business, Employees and Customers

8 Access Management Security Setup Menu Assurity reduces the complexities of implementation by offering 3 quick, easy steps. Simply choose one or more OneKey OTP products, a gateway and network connectivity to NAF.

9 World-Class Standards to Deliver Secure Authentication Complies to government ICT compulsory standards and regulations like Monetary Authority of Singapore TRM (2013), IM8, SS540, TIA942, FIPS, ISO/IEC 27001: % authentication service availability One device for access to multiple SPs 24/7 customer care service for public users

10 Over 600,000 OneKey Registrants - Used across industries

11 Innovating Access Management Security: Multiple Services with only ONE token Greater convenience at a click of a button.

12 Innovating Access Management Security 1 PLUS FA NTUC Members to Use One-Time Password for Portal Log-In

13 Innovating Access Management Security VPN As more companies practice BYOD, hot desking, working from remote sites, there is a greater need to AUTHENTICATE log-ins. Intranet Internet Pre-setting for gateway: API configuration for RADIUS,.NET, Java, LDAP Pre-setting for gateway: API configuration for RADIUS,.NET, Java, LDAP

14 Innovating Access Management Security Hosted Gateway For greater usage efficiency and cost savings, companies with small group of users can now opt for Assurity s HOSTED GATEWAY. Pre-setting for gateway: API configuration for RADIUS,.NET, Java, LDAP Intranet Internet Pre-setting for gateway: API configuration for RADIUS,.NET, Java, LDAP

15 Innovating Access Management Security Robust Token Assurity provides 2FA services via the OneKey Pad hardware token 1. OTP 2. Challenge Response 3. Transaction Signing.

16 Innovating Access Management Security Soft Token (iphone & Android) Creating greater convenience without the compromise of security

17 Innovating Access Management Security SMS OTP OneKey SMS OTP delivered via SMS for convenience to users

18 Innovating Access Management Security Everyone from everywhere can apply Non-Singaporeans may apply

19 Customer Care Center Assurity provides 24/7 tele-customer care service. OneKey users may also visit Assurity s Customer Care Center at International Plaza from Monday to Saturday. OneKey users can also manage their own tokens at Assurity s customer care officers are able to assist OneKey users to reset userid and passwords Replace tokens Answer queries on registration, activation, linking and use of OneKey

20

21

22 Public Call for Second Factor Authentication Business Times, 20 Sep 2013 AsiaOne, 19 Sep 2013 ZDNet Asia, 18 Sep 2013

23 Public Awareness of 2FA and OneKey Computerworld Singapore, 18 Sep 2013

24 Thank you For enquiries, please contact Jason Kong / Business Development Director Assurity Trusted Solutions, a wholly owned subsidiary of IDA jason@assurity.sg jason_kong@ida.gov.sg