Tokenless two-factor authentication solutions can be much more secureand actually cheaper than traditional passwords Tokenless two-factor authentication solutions can be much more secureand actually cheaper than traditional passwords - RSS feed from Security Park
(23/07/2009)

There is a common myth that passwords are both free and secure. However, this couldn’t be further from the truth as the cost of managing password resets, for example when a user has forgotten their password or been away on holiday, can often be extortionate.

Research from META Group and Gartner suggests that for an average organisation there are about 6.3 password-related helpdesk calls per user, per year and Forrester estimates that each call can cost businesses between $25-75 USD. So, based on the lower cost estimate for a typical 1000 user company, they can be spending between $157,500 and $472,500 on maintaining their “free” password system every year! And this is just the part that can be calculated - there are also other significant costs added to this, not least the loss of productivity when staff can’t access their computers.

GrIDsure has spoken to enough IT managers and users across the UK to know that they are fed up with so-called ‘strong passwords’ that require a mixture of numbers and capitals. These passwords usually have to be changed every 60 days and can become impossible to remember, so staff often end up writing them on a Post-it note and sticking it on their monitor or under their keyboard – and how secure is that?

So at a time when cutting costs has never been so important for the IT and security manager, it’s vital they don’t continue to delude themselves by thinking passwords are a low cost and secure option for authenticating individuals on to PCs, smartphones and web-based portals. They must realise that there are much more secure, cheaper and manageable systems available.

Companies are now offering tokenless two-factor authentication alternatives to passwords and PINs, and while there will never be a 100 per cent secure system, solutions such as these can be much more secure, easier to use and actually cheaper than traditional passwords - once the true costs have been considered.

Opinion piece submitted by Stephen Howes, CEO/CTO, GrIDsure

Related topics:  Authentication and identity management   ID card   Smart card 


print versionPrint version | email this to a friendEmail to a friend | related articlesRelated articles


Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.


Other Security news and resources


Security News Suppliers Directory Jobs forum Classifieds Knowledge base White papers Research library Security books Special reports Security interviews Security companies Security events Security links Security market

Product channels

Access Control Biometrics CCTV Intruder Alarms IT Security Manned Guarding Perimeter Protection Physical Security Remote Monitoring Security Services Fire, Health & Safety Other Security Products

IT Security white papers and research library

Access Control  Authentication  Data Management  Data Security  Digital Signatures  Email Security  Identity Management  Internet Security  Intrusion Prevention  Network Security  Remote access security  Security Management  Security Policies  Security Software  Security Threats  Virus Detection Software  Virus Protection  VPN  Vulnerability Assessment  Wireless Security 

Security books, guides, standards and toolkits

RFID and Smart Cards books, guides and reference documents  Biometric books, guides and reference documents  CCTV books, guides and reference documents  Intruder alarms and intrusion detection systems books, guides and reference documents  Monitoring and surveillance books, guides and reference documents  IT Governance, ISO 27001 ISO 17799 and BS 7799 toolkits  Fire, Health & Safety books, guides and reference documents





Ensure that you conduct an effective information security risk assessment that is in line with ISO 27001 by purchasing vsRisk™ Risk Assessment Tool

Need a
Security reference book?
Find it on Amazon
Security books

Article search

Directory search


add your company
Google

ISO 18028 (Network Security Management)
Home | About | Contact | Submit article | Advertise | Newsletter | RSS | Search