Maturity Model for Authentication
summary
NCSC-NL publishes a practical maturity model that maps accounts to Level 0–3 and shows concrete moves: passwords are Level 0, typical MFA only reaches Level 1, and true protection requires phishing-resistant authentication (FIDO/passkeys) at Levels 2–3. The model insists on doing a risk inventory (low/medium/high impact accounts), prioritizing high‑impact rollouts, and gives a reusable Creative Commons download with guidance and checklists to plan and measure migration.
AI-written summary · about
chapters (11)
- 0:00Introduction by host
- 0:21About the speaker and NCSC
- 1:27Story of the treehouse password
- 3:38History and problems with passwords
- 5:24Why passwords must die
- 6:51Limitations of multi-factor authentication
- 8:37Development of maturity model
- 10:01Maturity model explained
- 11:25Fishing-resistant authentication levels
- 13:36Call to action and conclusion
- 14:21Q&A session
related talks
34mThe Path of Secure Digital Identity
43mA door with no locks? Let’s talk about threat modeling
45mA door with no locks? Let’s talk about threat modeling
47mThe Psychology of Multi-Factor Authentication
14mMeasuring NIST Authentication Standards Compliance by Higher Education Institutions
29mMeasuring Cybersecurity Maturity with the NIST CSF
32mStop Counting Factors... Start Describing Authentication Events
30mBlueprint for Maturity: Crafting a Tailored Cyber Threat Intelligence Maturity Model