The common assumption is that stronger authentication makes an identity system safe enough for high-value transactions. This case shows why that is incomplete: Singapore’s public-sector services also need controls around privileged assistance, credential handling, and the ability to detect when one person’s identity is being reused to create unrelated services at scale.
The common assumption is that stronger authentication makes an identity system safe enough for high-value transactions. This case shows why that is incomplete: Singapore’s public-sector services also need controls around privileged assistance, credential handling, and the ability to detect when one person’s identity is being reused to create unrelated services at scale.