THE OFFICIAL BLOG OF THE SBS "DIVA"

A few months ago I was involved in a "Minimum security practices" benchmark setting with the Center for Internet Security group at www.cisecurity.org. And the goal of the project was the bare minimum security needed to properly secure personal identity information or other sensitive information on computers of every shape and size:  Peer to peer, networks, and yes, even SBS.  And when it got to the section where two factor authentication was being discussed, I pushed back saying that the technology wasn't mature enough to make it a bare minimum practice to safeguard PII.

I think I just changed my mind today:

Scorpion Software Corporate Weblog:
http://www.scorpionsoft.com/blog/archives/2007/04/scorpion_softwa_7.html

Because now security for sensitive information is clearly within reach for all sized firms.

CRYPTOCard secure Network Authentication - Resources > Press Releases:
http://www.cryptocard.com/resources/pressreleases/8_55_2_199.asp

So now for any of your clients that are like me that handle any sort of sensitive data can offer the unbeatable combination of all the flexibility of RWW and remote access and still assure your clients that remote access is secure.  And I'd argue that the normal caveat that I post "secure enough" doesn't apply.... secure enough with extra assurance might even be the better phrasing or something :-)

So if I was doing that task force today?  Two factor authentication is do-able for small businesses and now clearly within reach.