The Chartered Institute of Payroll Professionals ……………………………………………………………Policy News Journal
authentication app. Therefore, if your information is lost or compromised it will not give the attacker the capability to access to your account.
To get around this, criminals may try to use the account recovery processes to change your login details to something they know. The certified companies have to provide a way for you to access your account if you have forgotten your sign-in details. The certified companies are required to have measures in place to make sure if someone is trying to reset their sign-in details it is really the owner of the account and not someone else. For example, they might ask some security questions based on information you provided when you first create your account or ask you to provide some other proof of your identity. Hijacking Cyber criminals may not even try to attack your verified identity account with a certified company, but may instead target your computer, tablet or smartphone. They will try to install malicious software ( malware ) on your device that will let them intercept and interfere with your internet use. This way they can let you sign in as usual, but behind the scenes they can perform actions using your account that you are completely unaware of. We call this ‘hijacking’. Adam has already written about how we keep GOV.UK Verify secure and protect you from loss of data. Although hijacking is less identity related and more technical, we still count this as ‘identity enabled’ fraud since the criminal is misusing your identity account for their own gain. GOV.UK Verify, the certified companies and the connected government services try to spot hijacking occuring using a range of technologies but it is incredibly difficult. The most effective protection against this attack is for you to have good quality anti-virus software on your device and keeping it, your operating system, and other software up to date. Continuous improvement The controls we have built in to GOV.UK Verify and the standards we’ve set for identity assurance mean the service is resilient to a wide range of identity related crime. However, we’re always working to improve the way we work, respond to new and evolving threats and take advantage of the most up to date ways to help protect users of GOV.UK Verify from identity fraud. We work with colleagues across government and with law enforcement partners who have a current understanding of identity crime and the potential threats to the delivery of online services. This helps us to maintain an up to date understanding of the types of fraud that are being attempted and the methods being used.
We keep the good practice guides constantly under review. We update them regularly to make sure they reflect the evolving and changing ways in which identity fraudsters look to undertake their criminal behaviour.
Here are some links to publications and resources about GOV.UK Verify and identity assurance:
Introduction to GOV.UK Verify
Film demonstrating GOV.UK Verify
Information about how GOV.UK Verify is performing
Back to Contents
GOV.UK Verify passes the test 23 May 2016
Proving you are who you say you are, when you need to access government services via a digital platform looks to get easier as GOV.UK Verify nears go live.
GOV.UK Verify has so far been trialled across ten services in six government departments, which includes the Driver and Vehicle Licensing Agency (DVLA), HMRC, and the Department for Work and Pensions (DWP).
GOV.UK Verify aims to cut out the face-to-face verification work by allowing citizens to prove who they are online just once and then use that identity across a range of government services.
In a recent speech Cabinet Office minister Matt Hancock revealed the news that the flagship GOV.UK Verify had passed its service assessment and was due to go live “Privacy or cyber security are nothing without reliable verification of identity. So I’m delighted to announce that GOV.UK Verify has passed its service assessment and will go live next week.”
The Chartered Institute of Payroll Professionals
Policy News Journal
cipp.org.uk
Page 276 of 588
Made with FlippingBook - Online magazine maker