Topic starter
16/09/2026 9:20 am
TL;DR: Digital civic participation now depends on secure identities, protected communications, and practical access controls, according to Yubico’s Secure it Forward update. The core issue is not stronger security in the abstract, but making identity protection usable for nonprofits, media, and civic groups whose operational resilience depends on it.
Editorial analysis by NHI Mgmt Group, based on content published by Yubico: “Secure it Forward Spotlight: Cybersecurity as a key foundation for civic infrastructure”.
By the numbers:
- in 2025, the number of new organizations joining Secure it Forward grew by more than 300%
Key questions
Q: How should civic organisations strengthen identity security without overloading small teams?
A: Start with the identities that control communications, content and access recovery, then choose authentication and recovery flows that match the organisation’s staffing and support reality.
Q: Why do compromised accounts create outsized risk in public-interest organisations?
A: Because a single mailbox or admin account often anchors communication, coordination and trust.
Q: What are the signs that identity controls are not sustainable in the field?
A: Look for controls that require frequent specialist intervention, create repeated workarounds, or are only used by the most technically mature teams.
Practitioner guidance
- Map critical civic workflows to privileged accounts Identify which mailboxes, collaboration spaces and admin accounts carry public-facing communications or service coordination, then apply stronger authentication and tighter recovery controls to those identities first.
- Design controls for low-support environments Use security measures that can be configured and maintained by small teams with limited technical depth, so the control remains usable after initial rollout.
- Pair authentication with enablement Deliver training, setup guidance and ongoing support alongside identity controls so that users can adopt them without relying on ad hoc specialist help.
Bottom line: Civic organisations face identity risk because their communications and access paths are operational infrastructure, not side systems.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
16/09/2026 9:21 am
Civic identity resilience is a governance issue, not a niche outreach programme. The article places identity security inside the infrastructure that supports public participation, which is the correct framing for modern civic operations. When accounts, messaging and access paths are the channels of work, protecting them becomes part of resilience planning. Practitioners should treat public-interest identity estates as operationally sensitive rather than peripheral.
A question worth separating out:
Q: How can teams evaluate whether authentication support is actually improving resilience?
A: Measure whether critical accounts are protected, whether users can adopt the control without excessive help, and whether communications and access recovery still work during disruption. A control is effective only if it improves continuity as well as login security.
👉 Read our full editorial: Digital identity resilience is now civic infrastructure