graphgrc

SCF - IAC-28 - Identity Proofing (Identity Verification)

Mechanisms exist to verify the identity of a user before modifying any permissions or authentication factor.

Mapped framework controls

NIST 800-53

Control questions

Does the organization verify the identity of a user before modifying any permissions or authentication factor?