New security measures for high-risk user accounts

The ICT Portfolio has implemented a risk-based protection policy for high-risk user accounts to enhance identity management as part of its continuous cybersecurity protection and to reduce the attack surface.

The protection policy evaluates user risk (the likelihood that the identity is compromised) and sign-in risk (the likelihood that the sign-in is fraudulent) by analysing real-time signals such as location, device health and behaviour. Then, proactive threat mitigation is initiated, which involves resetting or changing passwords for all high-risk user accounts.