Should Police To Be Given Powers Over Passwords, Expert Weighs In

BACKGROUND:

In recent news, Irish police will have the power to compel people to provide passwords for electronic devices when carrying out a search warrant under new legislation. Should police to be given powers over password, expert provides an insight in light of fundamental security best practices.

Experts Comments

June 16, 2021
Niamh Muldoon
Senior Director of Trust and Security EMEA
OneLogin

This change in legislation is concerning as it not only goes against the fundamentals of security best practice and in particular Identity and Access Control, where you are accountable for all access under your account and you never share your account credentials. It also potentially removes the individual accountability associated with actions under the account which may impact the chain of custody of evidence associated with the case. I urge all government bodies to partner with

.....Read More

This change in legislation is concerning as it not only goes against the fundamentals of security best practice and in particular Identity and Access Control, where you are accountable for all access under your account and you never share your account credentials. It also potentially removes the individual accountability associated with actions under the account which may impact the chain of custody of evidence associated with the case. I urge all government bodies to partner with cybersecurity experts when considering legislation associated with digital identities to gather insights on practical implementations to ensure policy and/or legislation deliver to its achieved goal with no potential loopholes.

  Read Less
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.
Be part of our growing Information Security Expert Community (1000+), please register here.