<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>The aim of the present study is to provide an insight to a comprehensive risk assessment of the Hungarian eID card utilizing the ISO/IEC 27005:2022 standard. Unfortunately, the functions of the eID are nowhere near widespread among the Hungarian population. That is why it is time to carry out a risk assessment, which can help to introduce the functions efficiently, and improve the overall security of the eID card. Using the concepts and steps of the international standard ISO/IEC 27005:2022, the external and internal context of the Hungarian eID was determined, and after the asset-based risk identification, the risks that arose were evaluated. A comprehensive risk analysis can greatly help the effective introduction and operation of eGovernment services. The risks identified during the risk assessment, based on the ISO/IEC 27005:2022, performed on the Hungarian eID card can serve as a basis for the planning and development of appropriate IT security best practices and training materials. Previously, no risk analysis of the Hungarian eID was published based on the ISO/IEC 27005:2022. The results can contribute to making existing use cases safer, but it can also be used to create new use cases keeping IT security in mind.</p>
</abstract>

The aim of the present study is to provide an insight to a comprehensive risk assessment of the Hungarian eID card utilizing the ISO/IEC 27005:2022 standard. Unfortunately, the functions of the eID are nowhere near widespread among the Hungarian population. That is why it is time to carry out a risk assessment, which can help to introduce the functions efficiently, and improve the overall security of the eID card. Using the concepts and steps of the international standard ISO/IEC 27005:2022, the external and internal context of the Hungarian eID was determined, and after the asset-based risk identification, the risks that arose were evaluated. A comprehensive risk analysis can greatly help the effective introduction and operation of eGovernment services. The risks identified during the risk assessment, based on the ISO/IEC 27005:2022, performed on the Hungarian eID card can serve as a basis for the planning and development of appropriate IT security best practices and training materials. Previously, no risk analysis of the Hungarian eID was published based on the ISO/IEC 27005:2022. The results can contribute to making existing use cases safer, but it can also be used to create new use cases keeping IT security in mind.

A Risk Assessment of the Hungarian Eid Card

Scientific Bulletin

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

{"article-title":"A Risk Assessment of the Hungarian Eid Card"}

The aim of the present study is to provide an insight to a comprehensive risk assessment of the Hungarian eID card utilizing the ISO/IEC 27005:2022 standard....

A Risk Assessment of the Hungarian Eid Card

Published Online: Jun 07, 2024

Page range: 91 - 102

DOI: https://doi.org/10.2478/bsaft-2024-0010

Keywords
Electronic signature, IT security, information security, electronic identification card, risk assessment

© 2024 Norbert Nyári et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

A Risk Assessment of the Hungarian Eid Card

Published Online: Jun 07, 2024

Page range: 91 - 102

DOI: https://doi.org/10.2478/bsaft-2024-0010

KeywordsElectronic signature, IT security, information security, electronic identification card, risk assessment

© 2024 Norbert Nyári et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Keywords
Electronic signature, IT security, information security, electronic identification card, risk assessment