From Federal News Network:
The Social Security Administration is getting $23.3 million from the Technology Modernization Fund to implement multifactor authentication across its internal systems, part of a trio of recent TMF awards focused on cybersecurity and reliability. …
“Millions count on Social Security for their benefits, and we are committed to secure systems that protect their personal information and allow our hard-working employees to provide the daily services and assistance American retirees and other beneficiaries depend on,” Sean Brune, SSA’s chief information officer, said as part of the announcement. “This investment will improve security and protections of our programmatic systems while avoiding potential agency costs and potential disruption of services.”
The funding will help SSA accelerate the implementation of its phishing-resistant, single sign-on MFA solution across all internal systems and services. Using phishing-resistant MFA is a key requirement for agencies under the federal zero trust strategy. …
The TMF award comes as SSA is also planning to soon release a new IT strategic plan, Federal News Network reported last month.
This could be really helpful. There is already some discrepancies between when I’d.me or login.gov is acceptable as well as the original portal. Streamlining MFA login and streamlining login sites will be great for the upcoming generation of computer savy adults who are starting to retire.
ReplyDelete
ReplyDeleteGood . As an SSA employee soon I won't have to take any more of those mandatory SSA classes "systems security classes, about how to prevent phishing.
Not sure if many realize this, but MFA was heavily compromised across the world last year. Do a search for "mfa compromised" for more info.
ReplyDeleteEverything will be compromised at some point.
Delete