Digital Identity

A “tech only” answer only “paves the cow paths” as Michael Hammer and Thomas Davenport explain in Re-engineering Work: Don’t Automate, Obliterate, HARVARD BUSINESS REVIEW 104-112 (1990, July-August). 

“It is time to stop paving the cow paths.  Instead of embedding outdated processes in silicon and software, we should obliterate them and start over.  We should “reengineer” our businesses: use the power of modern information technology to radically redesign our business processes in order to achieve dramatic improvements in their performance.“

Digital invoice reforms need to be handled thoughtfully and carefully.  It needs to be approached with the same level of comprehensive seriousness as would apply to a commercial enterprise that undertakes a tech-based modernization of a fundamental business process. 

Successful BPR reforms require that a government authority pre-think, internally vet, and work-over countless fraud scenarios with the audit staff to make sure they “get it right” before it “goes live.”  You don’t “just digitize it!” R.T.A.

• Multi-factor authentication: This involves using more than one method of authentication, such as a password and a biometric factor, to verify a user’s identity. This makes it harder for attackers to gain unauthorized access to accounts.
• Encryption: Sensitive information, such as personal identification numbers (PINs) and biometric data, should be encrypted to protect it from unauthorized access.
• Regular updates: Digital identities should be updated regularly to ensure they remain secure. This can include things like changing passwords and updating security settings.
• Use of Trusted Identity Providers: Digital identities can be issued and verified by trusted third-party identity providers, such as the government, banks, and other financial institutions, which can increase the trust and security of the identities.
• Role-based access control: In this is an approach to digital identity management, in which access to resources is based on an individual’s role within an organization. This can help ensure that only authorized individuals have access to sensitive information and resources.
• Compliance: Digital identities should be designed and managed in compliance with relevant laws and regulations, e.g. as data privacy laws like GDPR and HIPAA.
• User-friendly security: Digital identities should be designed with the users in mind, making it easy for them to understand and use the technology, while also ensuring its security.