The National Institute of Standards and Technology and the Cybersecurity and Infrastructure Security Agency have finalized a publication titled Protecting Tokens and Assertions from Forgery, Theft, and Misuse. This document provides implementation guidelines to help organizations maintain the security of tokens used in digital systems. It addresses the requirements set by Executive Order 14306 and expands upon recent updates to Special Publication 800-53. The guidelines are primarily intended for federal agencies and cloud service providers but are applicable to any organization handling identity tokens.
Read the full story at citygov.com.
Photo: wiredsmartio / Pixabay