Report on Securing and Growing the Digital Economy · 2026-03-05 · 14 min
Key moments - from our scoring
Substance score
16 / 100
Five dimensions, 20 points each
Section 6 of the Commission on Enhancing National Cybersecurity's Report on Securing and Growing the Digital Economy addresses the critical role of strong identity management in protecting the digital economy. The report notes that despite predictions in 2004 about the demise of passwords, username and password authentication remains the most common form of identification - making it dangerously easy for malicious actors to steal identities and impersonate users online. The Commission recommends ambitious goals including zero major breaches by 2021 where password compromise is the primary attack vector.
The episode details four concrete action items for government and private sector collaboration. First, the next administration should require strong authentication for all federal citizen-facing services including IRS tax services, DHS immigration processing, Social Security Administration accounts, State Department passport services, and CMS health care programs. Second, federal agencies should mandate strong authentication for employees and contractors. Third, government should serve as an authoritative source for validating identity attributes through an interagency task force. Fourth, experts should develop identity management requirements for Internet of Things devices and processes. The report emphasizes the National Strategy for Trusted Identities in Cyberspace (NSTIC) framework and open standards like FIDO specifications as proven foundations for secure, usable, and interoperable identity solutions that enhance privacy while reducing cybersecurity risk.
Compromised identity characteristics, especially the use of passwords, have consistently been the main point of entry in major breaches over the past six years.
The report highlights FIDO (Fast Identity Online Alliance) specifications, which use public key cryptography and are deployed in solutions like Windows Hello, as well as multi-factor authentication capabilities already adopted by financial institutions.
The IRS (tax services), Department of Homeland Security (immigration and secure flight), Social Security Administration, Department of State (passport services), and Centers for Medicare and Medicaid Services should immediately initiate coordinated strong authentication efforts.
NSTIC is a five-year collaborative public-private sector effort to create an identity ecosystem with interoperability standards, privacy policies, and accountability mechanisms; pilot projects have generated innovative strong authentication solutions across healthcare, finance, education, retail, aerospace, and government.
Few IoT devices can be uniquely identified and data flows between them are poorly understood, but trust in automated decisions that affect personal and national interests requires confidence in device identification and assurance that data has not been altered.
Our reviewer’s read on each dimension, with quotes from the episode.
The actual content is a bureaucratic government commission policy document (~2016 vintage) read aloud, with several minutes consumed by ads. Policy boilerplate about identity management dominates; actionable, non-obvious insight for a B2B operator is sparse.
FIDO specifications are uh, focused largely on the mobile smartphone platform to deliver multi factor authentication to the masses, all based on industry standard public key cryptography
An ambitious but important goal for the next administration should be to see no major breaches by 2021 in which identity, especially the use of passwords, is the primary vector of attack
Every claim is recycled from a standard government commission report written circa 2016; there is no contrarian argument, no first-principles reasoning, and no perspective beyond standard policy-committee consensus language.
A review of major breaches over the past six years reveals that compromised identity characteristics have consistently been the main point of entry
In 2004, an industry leader predicted the demise of the traditional password because it cannot meet the challenge of keeping critical information secure. His analysis was right. Yet we still rely on username and password
There are no guests at all; the episode is a Librivox text-to-speech reading of a government document by volunteer readers, with zero practitioner perspective or operator experience present.
This is a Librivox recording. All Librivox recordings are in the public domain. For more information or to volunteer, please visit Librivox.org
The source document does name specific agencies, standards bodies, and one dated goal, which elevates it above pure abstraction, but there are no real metrics, case studies, or dollar figures - only named programs and institutional references.
Coordinated efforts should immediately be initiated for a variety of external facing government services including for tax services at the Internal Revenue Service, for immigration, secure flight and entry exit at the Department of Homeland Security, for Social Security accounts at the Social Security Administration
Windows 10 has deployed FIDO specifications known as Windows hello and numerous financial institutions have adopted FIDO for consumer banking
There is no conversation whatsoever - no host, no guest, no questions, no follow-ups, and no pushback; the entire episode is a monotone reading of a policy document interspersed with unrelated advertisements.
Keep your wellness routine going strong all summer. Cachava's new travel packs help you stick to your daily ritual even when you're on the go
End of Section 6 recording by Maria Casper
Computed from the transcript - who did the talking, and the words that came up most.
On April 13, 2016, President Obama established The Presidents Commission on Enhancing National Cybersecurity to devise a comprehensive strategy for safeguarding our cyberspace and the economic foundations built upon it. The commissions final report, published in December 2016, provides a thorough examination of the current state of cybersecurity, anticipates future challenges, and presents actionable recommendations for the incoming Trump administration and future leaders. It emphasizes the critical roles that the military, government, and private sector must play in strengthening our defenses against cyber threats. Join us as we explore the insights and strategies laid out in this pivotal report. - Summary by TriciaG
Transcribed and scored by The B2B Podcast Index.
Speaker A: Keep your wellness routine going strong all summer. Cachava's new travel packs help you stick to your daily ritual even when you're on the go. Just one packet of Cachava's all in One Nutrition Shake provides complete nutrition wherever you are. With 25 grams of protein, 6 grams of fiber, greens, adaptogens, and more. Simplify your daily ritual. Go to cachava.com and use code NEWS for 15% off. That's K A C-H AH-A-V A.com Code
Speaker B: News I, uh, cashed out my entire 401k thinking someone stole my identity.
Speaker C: A, uh, fake email cost me my dream home. After I sent my personal information to
Speaker D: a scammer, my AI agent wired thousands to an account I'd never seen.
Speaker E: When billions of people feel unsafe, that's no longer a security problem. It's an economic one. At Jenn, we're building the trust layer for a more fearless planet with products and technologies from our global brands, Norton, Lifelock, Avast, and Moneylion. See it in action@gendigital.com hey, it is Ryan Seacrest here.
Speaker F: If you love great games and a little extra excitement to your day, I got something fun for you. Chumba Casino and I have teamed up to create an exclusive online social casino game. It's called Ryan Seacrest 10K Ways. It's fun and free to play, just like all your favorites from Chumba Casino. And Every spin brings 10,000 ways to keep the good times going. Check it out and play for free today@chumbacasino um.com no purchase necessary VGW Group
Speaker G: Void where prohibited by law. CTS and C is 21 sponsored by
Speaker H: Chumba Casino Section 6 of Report on Securing and Growing the Digital Economy. This is a Librivox recording. All Librivox recordings are in the public domain. For more information or to volunteer, please visit Librivox.org Report on um Securing and
Speaker I: Growing the Digital Economy by the Commission on enhancing National Cybersecurity Imperative 1 Part
Speaker H: 2 Recommendation 1.3 the next administration should
Speaker I: launch a national public private initiative to achieve major security and privacy improvements by increasing the use of strong authentication to improve identity management. Strong identity management is key to much of what we do in the digital economy. In 2004, an industry leader predicted the demise of the traditional password because it cannot meet the challenge of keeping critical information secure. His analysis was right. Yet we still rely on username and password as the most common form of identification and authentication.
Speaker H: In doing so, we are making it
Speaker I: far too easy for malicious actors to steal identities or impersonate someone online. However, a variety of factors inhibit the commercial adoption of large scale identity management
Speaker H: frameworks that offer stronger and more usable
Speaker I: authentication, including convenience and the lack of uniform standards. Compounding these challenges is the need for identity solutions for connected devices. A review of major breaches over the past six years reveals that compromised identity characteristics have consistently been the main point of entry. An ambitious but important goal for the next administration should be to see no major breaches by 2021 in which identity, especially the use of passwords, is the primary vector of attack. Achieving this goal will enhance consumer trust in online transactions, but it will require identity solutions that are secure, privacy enhancing, efficient, usable, and interoperable.
Speaker H: Ultimately, these solutions need to be easy
Speaker I: to use by individuals who are accessing digital devices and networks. Otherwise, identity management will remain a vector for attack. This approach requires a fundamental shift in thinking on the part of designers and those responsible for cybersecurity toward making authentication stronger and simple to use.
Speaker H: An effective identity management system is foundational
Speaker I: to managing privacy interests and relates directly to security. Individuals should not have to be concerned about whether their personal information or information about their behaviors will be tracked without their direct involvement and consent. They should be comfortable knowing that the transmission of information to support identification in an online transaction will be minimized and will not include unnecessary data. Good privacy policies can enhance cybersecurity by accurately representing the ways in which the systems they govern actually operate. A UH Privacy Impact Assessment that identifies and mitigates potential risks is another important tool for organizations as they carefully consider the information being collected, UH retained, and stored. A good start to effective identity management has been initiated through the National Strategy for Trusted Identities in Cyberspace. NSTIC was instituted five years ago as a collaborative effort between the private and public sectors to create an identity ecosystem and establish a framework of overarching interoperability standards, risk models, privacy and liability policies, requirements, and accountability mechanisms. The Commission believes that NSTIC's vision aptly summarizes the identity management of the future. Individuals and organizations use utilize secure, efficient, easy to use and interoperable identity solutions to access online services in a manner that promotes confidence, privacy choice, and innovation. Pilot projects funded by NSTIC have resulted in a variety of strong authentication solutions in applications ranging from health care, finance, education and retail to aerospace and government. NSTIC generated identity solutions have been innovative and proven in real life settings, but they have not yet achieved broad transformation. Public and private sector adoption at greater scale is needed. The Commission believes that the effective partnership model fostered by NSTIC should continue to serve as the foundation for a strong and vibrant identity ecosystem. M the action items below are designed to move us toward this goal. Other important work that must be undertaken to overcome identity authentication challenges includes the development of open source standards and specifications like those developed by the Fast Identity Online Alliance. FIDO specifications are uh, focused largely on the mobile smartphone platform to deliver multi factor authentication to the masses, all based on industry standard public key cryptography. Windows 10 has deployed FIDO specifications known as Windows hello and numerous financial institutions have adopted FIDO for consumer banking. Today, organizations complying with FIDO specifications are able to deliver secure authentication technology on a wide range of devices including mobile phones, USB keys and near field communications and Bluetooth, low energy BLE devices and wearables. This work, other standards, activities and new tools that support continuous authentication provide a
Speaker H: strong foundation for opt in uh identity management for the digital infrastructure action item 1.3.1 the next administration should require that all Internet based federal government services provided directly to citizens require the use of appropriately strong authentication. Short term identity management is a major cybersecurity issue for which government can be
Speaker I: an effective catalyst for large scale adoption.
Speaker H: The federal Government should adopt industry based
Speaker I: capabilities for strong authentication for all external facing applications that require identity management. Coordinated efforts should immediately be initiated for a variety of external facing government services including for tax services at the Internal Revenue Service, for immigration, secure flight and entry exit at the Department of Homeland Security, for Social Security accounts at the Social Security Administration, for passport services at the Department of State, and for health care programs at the Centers for Medicare and Medicaid Services.
Speaker H: The Commission believes strongly that if government
Speaker I: requires strong authentication, the private sector will be more likely to do the same. This approach has the added value of not only securing federal applications directed at citizens, but also creating a broader identity ecosystem of solutions that deliver better security,
Speaker H: privacy, trust, usability, choice and convenience for
Speaker I: both public and private sector applications.
Speaker H: The most important action that government can
Speaker I: take to catalyze private sector adoption of the right kind of solutions for consumers is to use those solutions in its own citizen facing applications. The private sector will follow the government's lead if the government sets a high bar and clears it. Specifically, private sector organizations, including top online
Speaker H: retailers, large health insurers, social media companies
Speaker I: and major financial institutions should use strong authentication solutions as the default for major online applications.
Speaker H: Action Item 1.3.2 the next administration should direct that all federal agencies require the
Speaker I: use of strong authentication by their employees, contractors and others using federal systems.
Speaker H: Short term, the next Administration should provide
Speaker I: agencies with updated policies and guidance that continue to focus on increased adoption of
Speaker H: strong authentication solutions, including but importantly not
Speaker I: limited to, personal identity verification credentials.
Speaker H: To ensure adoption of strong secure authentication by federal agencies, the requirements should be
Speaker I: made performance based, that is strong, so they include other that is non PIV forms of authentication and should mandate 100% adoption within a year.
Speaker H: Action item 1.3.3 the government should serve
Speaker I: as a source to validate identity attributes to address online identity challenges. The next administration should create an interagency task force directed to find secure, user friendly, privacy centric ways in which agencies can serve as one authoritative source to validate identity attributes in the broader identity market. This action would enable government agencies and the private sector to drive significant risk out of new account openings and other high risk, high value online services and it would help all citizens more easily and securely engage in transactions online. As part of this effort, the interagency task force should be directed to incentivize states to participate. States, by issuing driver's licenses, birth certificates and other identity documents, are already playing a vital role in the identity ecosystem. Notably, they provide the most widely used source of identity proofing for individuals. Collaboration is key. Industry and government each have much to gain from strengthened online identity proofing.
Speaker H: The federal government should support and augment
Speaker I: existing private sector efforts by working with industry to set out rules of the road, identify sources of attributes controlled by industry, and establish parameters and trust models for validating and using those industry attributes.
Speaker H: Action item 1.3.4 the next administration should
Speaker I: convene a body of experts from the private and public sectors to develop identity management requirements for devices and processes in support of specifying the sources of data.
Speaker H: Short term, the Internet of Things is
Speaker I: causing massive data proliferation through devices that are capturing, aggregating and processing data. We are at the early stages of using this data to make choices that affect all aspects of our lives, from personal decisions to decisions that affect the nation. Trust in those decisions requires confidence in the devices that captured, aggregated and processed the data, as well as assurance that the data have not been accidentally or maliciously altered. This trust will come from being able to identify devices that act on their own, like sensors or devices that are associated with a person, like a mobile phone. Today, few devices can be uniquely identified and data flows between devices are not well understood.
Speaker H: We therefore must consider the problem of
Speaker I: identity management from the perspective of being able to securely and efficiently identify not
Speaker H: just people, but but also individual devices
Speaker I: and the data that come from them.
Speaker H: End of Section 6 recording by Maria Casper.
Speaker B: I cashed out my entire 401k thinking someone stole my identity.
Speaker C: A fake email cost me my dream home. After I sent my personal information to
Speaker D: a scammer, my AI agent wired thousands to an account I'd never seen.
Speaker E: When billions of people feel unsafe, that's no longer a security problem, it's an economic one. At Gen, we're building the trust layer for a more fearless planet with products and technologies from our global brands, Norton, Lifelock, Avast, and Moneylion. See it in action@gendigital.com hey, it's Bubba
Speaker J: Wallace from 2311 Racing. You know what it feels like forever sitting on a plane waiting for takeoff. Good thing I've got Chumba Casino. With daily Boost and social casino games on tap, this is the kind of fun that makes time fly. Why not turbocharge your downtime play now@jumbacasino.com let's Jumba.
Speaker G: Sponsored by Chumba Casino. No purchase necessary. VGW Group voidware prohibited by law. 21/ terms and conditions apply Hi, Ryan
Speaker K: Reynolds here for Mint Mobile. Are you looking for a beach read this summer? May I suggest your big wireless build? It's got suspense, mystery, a slightly flat emotional arc, and a shocking twist where you realize you've been overpaying the entire time. Fortunately, though, Mint's story is better. Every plan $15 a month, even unlimited. That's it. Happy ending, zero tears. Give it a try@mintmobile.com Switch upfront payment
Speaker L: of $45 for three months, $90 for six months, or $80 for a 12 month plan. Required $15 per month equivalent taxes and fees Extra initial plan term only greater than 50 gigabytes. Me slow when network is busy. See terms.
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
Mastercard CEO: AI Shopping Agents, Machine-to-Machine Payments, and the New Infrastructure of CommerceMotley Fool Hidden Gems Investing · on Cybersecurity88 / 100
Tax Time 2026: How ATO protects your financial dataWith Interest · on Multi-Factor Authentication85 / 100
Zero Trust as a Mindset: Identity, Governance, and Access | Interview with Andrew GaultSecure & Simple · on Identity management83 / 100
Why Most Startups Fail: Founders Don’t Know What They Don’t Know YetBuilt Not Born: The Startup Go-To-Market Podcast · on Cybersecurity80 / 100
Banks Rethink Fraud Controls as False Declines RisePYMNTS Podcast · on Multi-Factor Authentication80 / 100
Episode 46 - from Tashkent to Termsheet with Victor OrlovskyThe GoingVC Podcast · on Cybersecurity77 / 100
017 - Appendix 6 Cybersecurity Legislation Overview26 / 100016 - Appendix 5 Cybersecurity Policy Overview31 / 100015 - Appendix 4 Executive Order 1371826 / 100014 - Appendix 1 Imperatives Recommendations and Action Items26 / 100013 - Imperative 6 Ensure an Open Fair Competitive and Secure Global Digital Economy IV Next Steps36 / 100