Measuring NIST Authentication Standards Compliance by Higher Education Institutions

Explore a research presentation examining how well higher education institutions comply with NIST authentication standards. Learn about a comprehensive study analyzing the authentication policies of 135 colleges and universities across the United States and Canada, measuring their adherence to four key standards from NIST Special Publication 800-63 Digital Identity Guidelines. Discover findings on the widespread but inconsistent deployment of multi-factor authentication, and examine persistent issues with outdated practices including password expiration requirements, rigid password composition rules, and knowledge-based authentication methods. Understand the implications of these compliance gaps for cybersecurity in educational institutions and consider the researchers' recommendations for improving incentive structures and knowledge transfer mechanisms to better align institutional policies with expert cybersecurity guidance. Gain insights into the challenges of translating technical standards into practical implementation across diverse organizational contexts in higher education.