OMB explores addressing MFA needs for applications, operational technology in federal agencies

The Office of Management and Budget is exploring phishing-resistant multifactor authentication solutions to improve identity management in use cases for applications, operational technology and Internet of Things devices at federal agencies, according to OMB’s Nick Polk.

Traditional MFA “is not really a defensible architecture, in the sense that is relatively easier to bypass,” so OMB has “moved toward phishing-resistant multifactor authentication as a baseline for agencies,” Polk said at a Thursday meeting of the Information Security and Privacy Advisory...