The Global Force Management Data Initiative was launched to improve aggregation of unclassified force-structure data. Aggregation, though, raised concerns about classification because the system might be attractive to a potential adversary. The authors develop a framework for evaluating classification decisions to determine that, while overall classification is not indicated, the inclusion of some data will require careful consideration.

Passwords are proving less and less capable of protecting computer systems from abuse. Multifactor authentication (MFA) which combines something you know (e.g., a PIN), something you have (e.g., a token), and/or something you are (e.g., a fingerprint) is increasingly being required. This report investigates why organizations choose to adopt or not adopt MFA and where they choose to use it.