New York State Issues Trust Model for Managing Security, Identity

New York State Chief Information Officer Michael Mittleman and the New York State CIO Council have issued a best practice guideline to help state agencies and local governments manage employee/citizen access to online applications and transactions. The NYS Trust Model establishes basic standards and processes that will govern how identity credentials are issued, protected and managed, and will serve as the foundation for future identity and access management policies.

In the past, computer systems typically were used by a small number of individuals within a single agency, explained the NYS Office for Technology in a release. Today's computer systems are used by a wide variety of people including citizens and business partners, and across various agencies and geographical areas. The Internet has been a major driver of this change by enabling citizens to remotely access agency systems and transact business directly with government. In New York State alone, more than 350 online transactions are available to citizens and businesses.

Trust in the security of information exchanged over the Internet and other networks is vital, said OFT. Government must address the issues of user authentication, confidentiality, and integrity of data transferred, and the ability to hold transacting parties accountable when necessary. Thus, solutions that provide this type of protection are critical components of an organization's information security program. Trusting the identity of users is an important part of such a solution.