Federal agencies are required to implement phishing-resistant authentication standards, yet practical challenges often limit the effectiveness of traditional Personal Identity Verification (PIV) card programs. Obtaining a new PIV card can take months, replacing lost cards may take weeks, and some contractors or temporary workers may not be eligible for PIV credentials despite needing secure access. In addition, certain devices do not support PIV card readers, creating accessibility and operational challenges. As a result, agencies often rely on less secure interim authentication methods that increase risk. A more effective approach is the flexible management of alternative authenticators, such as smart cards and USB security keys, which can provide secure, phishing-resistant access for emp

Join for free to read