Overcoming the Compliance Challenges of Biometrics
Due to increased regulations designed to protect sensitive data such as personally identifiable information (PII) and protected health information (PHI), hospitals and other industries requiring improved data protections are starting to adopt biometrics. However, adoption has been slow within many of the industries that have suffered most of the breaches over the last several years. One reason adoption has been slow is that companies hesitate to implement biometrics across their organization without first understanding the vast complexities of the various state-by-state privacy regulations. By adopting a common biometrics compliance framework, this research will show how organizations can implement biometric solutions that comply with the overall spirit of the different state privacy and biometric regulations, enabling those companies to improve global data protections.
38970 (PDF, 2.23MB)
22 May 2019Related Content
Reducing Excessive Trust in the Web PKI Ecosystem
Research PaperThis research examines the possibility of developing an add-on for the open-source mitmproxy project to add drift detection for root Certification Authority (CA) certificates, incorporate policy-based controls over which CAs are allowed, and leverage an ensemble of existing technologies—some in novel ways—to reduce the level of trust placed in the public Web PKI.
- 12 Mar 2026
Inside the Five Most Dangerous New Attack Techniques
Research PaperThis e-book represents the next evolution of that effort. Here, we take the five key topics presented from the keynote stage and expand them into four full-length chapters.
- 8 Dec 2025
- Heather Barnhart, Rob T. Lee, Joshua Wright, Tim Conway
Structural Vulnerability: Autodesk Revit Server WAN Exposure Versus Cost of Autodesk Construction Cloud
Research PaperAutodesk Revit Server, a critical collaboration tool in the architecture, engineering, and construction (AEC) industry, was designed to operate within trusted networks.
- 7 Nov 2025
Privacy Protections: Are Stronger Laws Changing What We Reveal?
Research PaperAs U.S. states enact privacy laws aimed at giving consumers more control over their personal data, little is known about whether privacy legislation influences individuals’ willingness to disclose their identity on public platforms.
- 26 Sep 2025
Revolutionizing ISO 27001 Audit Evidence Collection: Steampipe as the Ultimate Tool
Research PaperIn the current landscape of increasing regulations, cyber breaches, and business risks, information...
- 5 Dec 2024
Assessing Operational Technology: Using the ONG-C2M2 Model and CIS Controls to Assess Operational Technology (OT) Environments
Research PaperMost small to medium-sized organizations rely heavily on CIS Controls (Center for Internet Security,...
- 20 Dec 2023
Who Needs a Pentest: Validating the Configuration of an EDR Solution Using the MITRE ATT&CK Framework
Research PaperIs that EDR suite fully configured, and providing the expected protection? Do we have a scalable way...
- 7 Nov 2023
"Think Different" About Compliance: Is Effective, Automated macOS Configuration Achievable with NIST's macOS Security Compliance Project?
Research PaperInformation security compliance within the Apple macOS ecosystem is an especially challenging...
- 21 Dec 2022
Risk Prioritization: An Examination of Published Exploitability Ratings
Research PaperBusinesses struggle to prioritize the remediation of vulnerabilities in their environment. One...
- 27 Jan 2022
Ransomware Impact Assessments: Guidance is Common, Your Organization is Not!
Research PaperDefeating ransomware's threat has become a cyber-Sisyphean task because the cybersecurity community...
- 3 Nov 2021
Security Network Auditing: Can Zero-Trust Be Achieved?
Research PaperSince 2010, government and business organizations have begun to adopt the Zero-Trust framework....
- 23 Sep 2020
Risk Management with Automated Feature Analysis of Software Components
Research PaperOrganizations developing software need pragmatic risk management practices to prevent malicious code...
- 27 Aug 2020
Answering the Unanswerable Question: How Secure Are We?
Research PaperBusiness environments consist of invisible or ill-defined risk factors which create challenges with...
- 3 Jun 2020
Building an Audit Engine to Detect, Record, and Validate Internal Employees' Need for Accessing Customer Data
Research PaperWhen using Software-as-a-Service (SaaS) products, customers are asked to store and entrust a large...
- 11 Dec 2019
Securing the Supply Chain - A Hybrid Approach to Effective SCRM Policies and Procedures
Research PaperOrganizations' supply chains are growing increasingly interdependent and complex, the result of...
- 7 Nov 2019
Cyber Protectionism: Global Policies are Adversely Impacting Cybersecurity
Research PaperCyber Protectionist policies are adversely impacting global cybersecurity despite their intent to...
- 21 Aug 2019
Evaluation of Comprehensive Taxonomies for Information Technology Threats
Research PaperCategorization of all information technology threats can improve communication of risk for an...
- 26 Mar 2018
Increase the Value of Static Analysis by Enhancing its Rule Set
Research PaperStatic analysis tool vendors are debating whether to allow their customers a rule-set tailored to...
- 29 Jan 2018
Leverage Risk Focused Teams to Strengthen Resilience against Cyber Risks
Research PaperInformation security, risk management, audit and business continuity teams must continue to evolve...
- 17 Nov 2017
Securing Against the Most Common Vectors of Cyber Attacks
Research PaperAdvanced Persistent Threat (APT) adversaries run highly targeted, multifaceted campaigns to exploit...
- 12 Sep 2017