BACKGROUND:
In recent news, Irish police will have the power to compel people to provide passwords for electronic devices when carrying out a search warrant under new legislation. Should police to be given powers over password, expert provides an insight in light of fundamental security best practices.
Information Security Buzz (aka ISBuzz News) is an independent resource that provides the experts comments, analysis and opinion on the latest Information Security news and topics
<p>This change in legislation is concerning as it not only goes against the fundamentals of security best practice and in particular Identity and Access Control, where you are accountable for all access under your account and you never share your account credentials. It also potentially removes the individual accountability associated with actions under the account which may impact the chain of custody of evidence associated with the case. I urge all government bodies to partner with cybersecurity experts when considering legislation associated with digital identities to gather insights on practical implementations to ensure policy and/or legislation deliver to its achieved goal with no potential loopholes.</p>