Information on SFOR I found enjoyable:

Some References:

Ref 4.42 https://www.iso.org/obp/ui/#iso:std:iso:19092:ed-1:v1:en for Financial services — Biometrics — Security framework

& 3.27 https://www.iso.org/obp/ui/#iso:std:iso-iec:27040:ed-1:v1:en for
Information technology — Security techniques

INTERNATIONAL STANDARD (ISO)- Information technology — Security
techniques (MFA/OOBA) http://jmp.sh/yHbcqX1 & http://jmp.sh/1PVOdla

ZPaul

Another Post I enjoyed:

I know, with all of the information we get bombarded with on a daily basis, it can be confusing. But try to follow the bouncing ball here:

ISO (which stands for "INTERNATIONAL Organization for STANDARDIZATION" is a worldwide body made up of experts who promote standards across many areas--technology included. Systems, equipment or processes that are ISO certified carry an expectation that they are widely used on an international level, safe and reliable, and considered "best practice" in their respective industries.

ISO has published standards for Multifactor Authentication/Out-of-band Authentication, as well as Biometric and other security frameworks. These technologies are patented by... (can you guess?) That's right! Strikeforce Technologies, Inc!

So essentially what we have (and why it should matter to us) is pretty simple. An identified INTERNATIONAL STANDARD is being widely used by everyone in the industry, with the patented rights to that standard belonging to a teeny-tiny company in New Jersey that's currently trading at a penny and a half.

It's kinda like the cow vs. the milk analogy. Right now everyone's taking the milk for free, so why buy the cow right? They're really just stealing from the cow though, and very soon with Blank Rome's and Ropes&Gray's help, all these companies will not only have to pay for the milk going forward, they'll need to give back all the milk they took in the past. Once these 7 milk thieves pony up, the line for milk will be very long indeed and it won't be going for a penny....

Kscott74