We’re Tracking the Future of Security

Category: Government

  • CISA Election Security Plan Highlights Patching and Voter-Database Risks

    CISA Election Security Plan Highlights Patching and Voter-Database Risks

    The Cybersecurity and Infrastructure Security Agency has published its 2026 election security plan, outlining operational risks and federal support priorities for state and local election organizations. The plan treats elections as a distributed critical-infrastructure environment in which technology, physical processes and public communications must remain resilient together.

    Patching and voter databases remain central concerns

    CISA notes that election offices can face practical barriers to patching systems during active election periods, when changes may disrupt testing or certified configurations. The plan also emphasizes risks to voter-registration databases, including unauthorized access, service disruption and manipulation attempts. Recommended support includes vulnerability information, incident coordination, exercises and resources tailored to election administrators.

    The document also addresses physical security, continuity planning and the need to communicate quickly when technical incidents or false claims could undermine confidence. Responsibility remains shared among local, state and federal organizations rather than concentrated in one platform.

    Controls need evidence before election day

    Election authorities should maintain tested offline recovery, privileged-access review, logging and clear change windows. Tabletop exercises should connect cyber teams with physical-security, communications and legal functions. SectechMedia tracks this combined risk in its cyber-physical security coverage.

    Sources

  • IRS Considers AI Triage for Identity-Theft Backlog Nearing 257,000 Cases

    IRS Considers AI Triage for Identity-Theft Backlog Nearing 257,000 Cases

    The US Internal Revenue Service is considering whether artificial intelligence could help assess the complexity of identity-theft cases and route them to appropriately trained employees. The proposal appears in the agency’s response to a Treasury Inspector General for Tax Administration audit; the report does not say that an AI triage system has already been deployed.

    Most delay occurs before assignment

    The audit found that identity-theft victims waited an average of roughly 20 months for resolution across fiscal years 2023 through 2025, compared with the agency’s 120-day objective. Cases in the audit sample spent most of that time in unassigned inventory. The unresolved workload had fallen from earlier levels but still stood near 257,000 cases in May 2026.

    TIGTA recommended evaluating case complexity before assignment and moving claims into active processing more quickly. The IRS agreed to study whether AI could support that work rather than divert experienced identity-theft staff to screen incoming cases.

    Automation needs auditable safeguards

    Any triage model used for identity-fraud cases would need documented routing criteria, human review, bias testing and an appeal path for misclassified claims. Performance should be measured against resolution time and error rates, not only throughput. SectechMedia follows related controls in its identity and access coverage.

    Sources

  • ID4Africa Sets Connected Digital Identity Ecosystems as 2027 AGM Theme

    ID4Africa Sets Connected Digital Identity Ecosystems as 2027 AGM Theme

    ID4Africa has selected connected digital identity ecosystems as the theme of its 2027 Annual General Meeting. The program is expected to examine how foundational identity, credentials, payment systems and public or private services can work together without turning interoperability into uncontrolled data sharing.

    The focus moves from enrollment to practical use

    Many identity programs have concentrated on registration and credential issuance. The 2027 theme emphasizes what happens after enrollment: how a verified identity supports healthcare, finance, social protection, travel and other services through trusted connections.

    Useful integration requires more than a shared identifier. Relying parties need common assurance language, secure interfaces, governance rules and a method for handling corrections or revocation. Systems also need to work for people with limited connectivity or devices.

    Connections increase both utility and dependency

    A connected ecosystem can reduce repeated proofing and make services easier to access, but failures can propagate across multiple organizations. Programs should test degraded operation, recovery, privacy boundaries and alternatives for users who cannot complete a digital transaction.

    The agenda extends the interoperability questions covered by SectechMedia’s Access Control & Identity section. Successful identity infrastructure should make trust decisions understandable, preserve an audit trail and avoid treating every service as entitled to the same data. The 2027 meeting is scheduled to bring government, industry and civil-society stakeholders into that design discussion.

    Sources

  • Ireland Expands Public Services Card Role Amid National ID Debate

    Ireland Expands Public Services Card Role Amid National ID Debate

    Planned changes to Ireland’s Public Services Card have reopened debate about whether the credential is becoming a national identity system. Parliamentary discussion on September 22 addressed broader acceptance of the card and the governance implications of using one credential across more services.

    Expansion changes the assurance and governance questions

    A credential originally designed for access to public services can take on a different role when more organizations rely on it for identity evidence. That expansion raises questions about purpose limitation, eligibility, alternatives, data sharing and the consequences of a failed or revoked credential.

    Supporters argue that a reusable card can reduce repeated identity checks and simplify service access. Critics focus on whether the legal basis, transparency and oversight are sufficient when the same identity infrastructure reaches beyond its original administrative context.

    Identity programs need clear boundaries and fallback paths

    Operators should document which attributes are verified, which organizations may rely on them and what data is exchanged during a transaction. A card presented as proof should not automatically expose unrelated information. Citizens also need a workable route when a card is lost, disputed or unavailable.

    The debate is relevant to broader Access Control & Identity programs. Reuse can improve convenience, but only when assurance, consent, auditability and redress remain visible. Technical interoperability should follow a defined policy model rather than quietly expanding the credential’s function through individual service decisions.

    Sources

  • GSMA Roadmap Links Africa’s Digital ID Growth to Closing the Mobile Usage Gap

    GSMA Roadmap Links Africa’s Digital ID Growth to Closing the Mobile Usage Gap

    A new connectivity roadmap from the GSMA and the Partnership for Digital Access in Africa argues that network coverage alone will not deliver inclusive digital identity and public services. The analysis says hundreds of millions of people live within mobile-broadband coverage but do not use mobile internet.

    The usage gap is larger than the coverage gap

    The roadmap reports that roughly 906 million people, about 60 percent of Africa’s population, were within mobile-broadband coverage but remained offline in 2025. It draws on 11 countries and shows that the main barriers differ by market. In some places infrastructure is still the constraint; elsewhere device cost, electricity, skills, trust or the usefulness of available services matters more.

    That distinction is important for digital identity programs. A credential or government portal may be technically available, yet remain inaccessible to a person who cannot afford a smartphone, maintain connectivity or use the service confidently. Expanding online identity without addressing those conditions can reproduce offline exclusion.

    Digital participation requires coordinated investment

    The roadmap calls for affordable devices, migration from legacy networks, reliable energy, shared rural infrastructure and services that provide practical value. Governments planning digital-ID access should also retain assisted and offline channels, test accessibility and avoid making essential services dependent on one device or network. SectechMedia follows identity infrastructure in its access control and identity coverage.

    Sources

  • FBI Clears 1.8 Million-Sample DNA Backlog and Expands Rapid DNA

    FBI Clears 1.8 Million-Sample DNA Backlog and Expands Rapid DNA

    The FBI says its Federal DNA Database Unit has reduced an accumulated backlog of roughly 1.8 million samples below the level it considers normal monthly inventory. The milestone follows expanded staffing, longer operating hours, information-technology upgrades and partial automation of intake for samples submitted by the Department of Homeland Security.

    Backlog does not mean zero pending samples

    The bureau defines a backlog as pending inventory beyond what the unit can ordinarily process within a month. Reporting says the unit declared the backlog eliminated after the count fell below its operating threshold. The samples support numerical DNA profiles that can be entered into the Combined DNA Index System and compared with forensic records.

    A Department of Justice budget document says federal submissions rose sharply after DNA collection expanded, while later reductions in incoming volume gave the laboratory room to process accumulated inventory. The FBI is seeking additional personnel and funding to sustain the workload rather than treating the clearance as a permanent capacity guarantee.

    Rapid DNA is the next operational focus

    The bureau also plans wider use of Rapid DNA systems that automate qualifying profile development from a cheek swab. Deployment at booking locations could shorten selected identity checks, but accreditation, sample handling, eligibility rules and human review remain essential. Rapid processing does not replace governance of collection or database searches. SectechMedia follows related systems in its identity technology coverage.

    Sources

  • Moldova Proposes National Facial Image Registry for Police Searches

    Moldova Proposes National Facial Image Registry for Police Searches

    Moldova’s Ministry of Internal Affairs has proposed a national Facial Image Registry, known as RIF, for law-enforcement identity searches. The planned system would receive, store and compare facial images to support criminal investigations, missing-person cases and identification of human remains.

    Candidate matches would require review

    The proposal describes both one-to-one comparisons and one-to-many searches. Investigators could submit a legally obtained image of an unidentified person and receive a list of possible candidates. That output would be a preliminary technical result rather than a confirmed identity; qualified personnel would have to review a potential match before it could have an operational effect.

    The draft does not call for automatically importing photographs of the entire population. Images would need a legal basis and authorized source. Access would be limited by role, activity would be logged, and general searches without a lawful purpose would be prohibited under the proposed framework.

    European interoperability raises governance stakes

    Moldova is also aligning police-data exchange rules with the European Prüm II mechanism, which covers facial images alongside fingerprints, DNA and other records. Cross-border exchange would depend on separate legislation and confirmation procedures. Strong audit, retention, disclosure and redress controls will be essential if the project advances. SectechMedia follows related technologies in its identity security channel.

    Sources

  • EU Sets Digital ID Rules for Cross-Border Health Data Exchange

    EU Sets Digital ID Rules for Cross-Border Health Data Exchange

    The European Union has adopted implementing rules for identity, authentication and interoperability in cross-border electronic health-data exchange. Commission Implementing Regulation (EU) 2026/2099 establishes technical and organizational requirements intended to support trusted access across national systems.

    Identity assurance becomes part of the exchange architecture

    Cross-border health services must determine who is requesting or providing data, which role the person holds and whether the relying system can trust the asserted identity. The regulation connects those checks with common interoperability and security requirements rather than treating authentication as an isolated login feature.

    The rules sit within the European Health Data Space framework and are designed to support consistent exchange while national identity and healthcare infrastructures remain different. Implementers must therefore map local credentials and professional roles into a shared trust model without weakening national safeguards.

    Deployment requires governance beyond technical connectivity

    Operators should document identity proofing, credential lifecycle, role assignment, consent and audit responsibilities across organizational boundaries. A successful connection does not by itself prove that the correct person received the correct level of access. Exception handling and revocation must work across the same chain.

    The regulation is relevant to broader Access Control & Identity programs because it demonstrates how identity assurance, authorization and interoperability meet in a regulated environment. Health-data exchange teams should test both normal and degraded workflows, preserve decision records and verify how trust changes when a credential or professional role expires.

    Sources

  • Croatia Considers mGrađani Digital Identity for Online Age Verification

    Croatia Considers mGrađani Digital Identity for Online Age Verification

    Croatia is considering its mGrađani digital identity application as a tool for electronic age verification while European institutions develop new online child-protection rules. The government says the application already supports a privacy-preserving way to confirm that a user is over 18.

    Age proof without full identity disclosure

    The Croatian Ministry of Justice, Public Administration and Digital Transformation said more than 204,000 citizens use mGrađani. Its age-verification function is designed to provide an eligibility result rather than disclose a person’s full identity record to an online service. That distinction can reduce unnecessary data exposure when a service only needs proof of age.

    The proposal is being discussed as Croatia prepares its position on the emerging EU KIDS Act framework. The final European rules and the technical role of national identity applications are still developing, so the announcement should not be read as a completed mandatory deployment.

    Implementation questions remain

    Age-verification systems need clear legal purpose, data-minimization controls, accessible alternatives and testing against exclusion or circumvention. Operators also need assurance that relying services cannot silently expand the information requested beyond the age claim. SectechMedia follows related identity architecture in its access control and identity channel.

    Sources

  • ICE Plans Nationwide Intelligence Support Network for Biometric Targeting Operations

    ICE Plans Nationwide Intelligence Support Network for Biometric Targeting Operations

    U.S. Immigration and Customs Enforcement is preparing a contracting effort to expand intelligence research support across Enforcement and Removal Operations headquarters, field areas and national targeting centers. The proposed structure, described in federal procurement records, would place cleared analysts in locations that already use biometric and biographic information for identity resolution.

    A distributed analyst network

    The planning documents call for approximately 142 intelligence research specialists across headquarters, 24 field areas and three national support centers. The Law Enforcement Support Center, National Criminal Analysis and Targeting Center and Pacific Enforcement Response Center already combine law-enforcement, immigration and identity information to generate operational leads.

    The statement of work does not say that contractor analysts will operate a new facial-recognition or fingerprint platform. It describes all-source research, intelligence-gap analysis, network analysis and operational support within an existing enforcement architecture. Reporting should therefore distinguish the proposed analyst workforce from any separate biometric technology procurement.

    Governance and oversight

    The records describe work involving classified information, law-enforcement-sensitive data and personally identifiable information. Any deployment will require strict access controls, audit logging, human oversight, retention rules and review of how identity data supports consequential decisions. The procurement notice was posted on September 18 and remained a planning action rather than proof of a completed award. SectechMedia follows similar systems in its border security coverage.

    Sources