Risk Management

Identity Risk. Design-time.

Managing the implementation of checks and controls required to ensure a particular level of assurance associated with a credential

•  HOW-TO Conduct a Risk Assessment to Determine Acceptable Credentials
•  HOW-TO Incorporate Risk Management into Assurance Level Determination
•  Likelihood of Alien Invasions and Assurance Levels

•  What Is the Role of Transaction Risk in Identity Assurance?
•  Are Federated Credentials and Continuous Identity Verification Compatible?
•  Should Level of Assurance be Scalar or a Vector?

Transaction Risk. Run-time.

Managing the implementation of checks and controls within the authentication process itself to ensure that a transaction can be trusted

Compensating Controls. The final defense.

Managing the implementation of checks and controls to mitigate the uncovered risk resulting from the mismatch between the assurance level provided by the credential and the assurance level required by the relying party

•  These Are Not The LOAs (1+,2+,3+) You Are Looking For. Move Along
•  Why I Will Not Ride The (Trust) Elevator
•  FRAUD as a Digital Platform Service