Assignment:
PART A
The Personal Identity Verification (PIV) card is used in non-military government agencies for authentication and identification to gain access to systems, networks, and online resources. These cards, in combination with a personal identification number, meet two-factor requirements. PIV credentials also are designed to help reduce counterfeiting and are tamper-resistant.
An authenticator app, such as Google Authenticator, is another method to achieve two-factor authentication. It is a free app available for installation on mobile devices.
The U.S. federal government authorizes the use of PIVs as well as authenticator apps, depending on the circumstances.
Answer the following question(s):
1. In what type of situation would an authenticator app provide adequate two-factor authentication for federal government use? Provide rationale or a citation for your answer.
2. In what type of situation would a PIV be required for federal government use? Provide rationale or a citation for your answer.
Fully address the questions in this discussion; provide valid rationale or a citation for your choices; and respond to at least two other students' views.
PART B
The U.S. government classifies sensitive information into four main categories based on the degree of damage that would occur to national security if the information were disclosed in an unauthorized manner: Unclassified, Confidential, Secret, and Top Secret.
A typical classification scheme used by the private sector includes these categories: Public, Internal, Sensitive, and Highly Sensitive.
Answer the following question(s):
1. Why do you think the U.S. government does not typically use the Sensitive category?
2. What classification levels would a private company that works on government contracts use? Why?