Case studies: the Secure by Default Partnership Programme

The Secure by Default Partnership Programme is run by the NCSC and is designed to:

• encourage adoption of the latest security technologies
• generate feedback for developers
• provide case studies to other organisation who may be considering deploying the same technologies

2016 Programme – Windows 10 and Modern Authentication

Windows 10 was released in 2015, and introduced a new set of authentication technologies known collectively as Windows Hello. These technologies augment and replace passwords with cryptographically strong keys, with hardware-backed secure storage and single sign on support. These keys are then unlocked using one of a number of methods, including biometrics and short PIN codes.

The following video summarises how alternatives to passwords can be implemented.

Windows Hello has the potential to improve the security and usability of user-to-device and user-to-service authentication, but was seeing limited uptake. The 2016 programme examined how organisations fared with deploying Windows Hello. Their case studies can be found accessed below.

• How Ofqual (Office of Qualifications and Examinations Regulation) implemented two-factor authentication to improve usability & security.
• The JAC’s Head of Digital explains how guidance from the NCSC helped to transform authentication and login at the Judicial Appointments Commission.
• Easier logins, better connectivity, genuinely portable devices: improving the mobile user experience at West Berkshire Council.