Government has spent years digitizing services. The next challenge is fundamentally different. We are now connecting them. Digital identity, payments, data exchanges, cloud platforms, artificial intelligence and automated services are converging into an increasingly interconnected government ecosystem. The opportunity is enormous. So is the concentration of risk.
Identity Is No Longer an Application. It Is Infrastructure.
Digital identity is becoming the front door to government. Citizens increasingly expect to move between agencies and services without repeatedly proving who they are, resubmitting the same information or navigating disconnected systems. Governments globally are responding by building digital public infrastructure that connects identity, payments, data exchange and services.
That changes the executive equation. When identity supports multiple services, its failure is no longer isolated. An identity compromise can quickly become an access problem, a fraud problem, a privacy problem, a benefits problem, a cybersecurity problem, and ultimately a public trust problem.
Digital identity must therefore be treated less like another technology implementation and more like the infrastructure on which mission delivery increasingly depends.
Interconnection Creates Value. It Also Concentrates Risk.
Government has spent decades trying to eliminate silos, and rightly so. Interoperability can improve service delivery, reduce duplication, accelerate decisions and create a far better citizen experience. But every new connection also creates a dependency. The more interconnected government becomes, the more leaders must understand the potential blast radius when something fails.
What happens when a shared identity service goes down? What if credentials are compromised? What if one trusted system passes corrupted information to another? What happens when a critical commercial provider becomes unavailable?
The strategic question is no longer simply, How quickly can we digitize? It is How safely and resiliently can we connect?
NIST’s current Digital Identity Guidelines reinforce this broader risk perspective by addressing security, privacy, fraud, customer experience and impacts on enterprise operations, individuals and other organizations.
AI Changes the Identity Question
Artificial intelligence raises the stakes again. Government increasingly must determine not simply who a person is, but who or what is acting, on whose behalf, with what authority, using which information and within what boundaries.
Imagine an AI agent retrieving sensitive information, initiating a workflow, recommending an eligibility determination, interacting with another agency or executing an action for an employee. Who authorized it? What can it access? What can it change? When must a human intervene? Can every consequential action be reconstructed and explained afterward?
These are not merely AI questions. They are identity, authority, accountability and governance questions.
NIST’s guidance provides an important foundation for identity proofing, authentication, federation, and digital identity risk management. But NIST also explicitly notes that the current guidelines do not address areas such as machine-to-machine authentication or API access on behalf of subjects. That boundary highlights an emerging executive challenge as autonomous systems become more prevalent.
If an agency cannot confidently establish who or what is acting, what it is permitted to do and who remains accountable, it does not simply have an AI problem. It has an accountability gap.
Stop Treating Identity as an IT Program
This may be the most important leadership shift. Digital identity cannot belong solely to the CIO or CISO. It touches mission delivery, cybersecurity, privacy, fraud prevention, customer experience, accessibility, data governance, acquisition, workforce, legal authorities, continuity and public confidence.
That makes identity an enterprise leadership responsibility. For senior executives, the strategic equation is straightforward:
IDENTITY + INTEROPERABILITY + SECURITY + RESILIENCE + GOVERNANCE + TRUST = PUBLIC VALUE
The cheapest or fastest implementation may not be the best strategic decision if it introduces dependencies, concentrates risk, reduces interoperability or weakens citizen confidence.
The Executive Test: What Happens When Identity Fails?
Before approving the next digital initiative, agency leaders should ask harder questions. If this identity capability becomes unavailable tomorrow, what missions stop? If credentials are compromised, how far can the damage travel? If an AI agent acts incorrectly, who is accountable? If systems become more interconnected, are governance structures keeping pace? And if citizens do not trust the infrastructure, does the sophistication of the technology really matter?
The next generation of government will not be defined by how many services agencies put online. It will be defined by whether people, data, systems, organizations and AI can interact securely, seamlessly, resiliently and accountably at scale.
That requires more than modernization. It requires executive stewardship.
Because once identity becomes infrastructure, trust becomes mission critical.
Dr. Rhonda Farrell is a transformation advisor with decades of experience driving impactful change and strategic growth for DoD, IC, Joint, and commercial agencies and organizations. She has a robust background in digital transformation, organizational development, and process improvement, offering a unique perspective that combines technical expertise with a deep understanding of business dynamics. As a strategy and innovation leader, she aligns with CIO, CTO, CDO, CISO, and Chief of Staff initiatives to identify strategic gaps, realign missions, and re-engineer organizations. Based in Baltimore and a proud US Marine Corps veteran, she brings a disciplined, resilient, and mission-focused approach to her work, enabling organizations to pivot and innovate successfully.
Leave a Reply
You must be logged in to post a comment.