Statement

The West Texas A&M University implements requirements that Identity evidence be provided, and veri prior to issuance of system access. Forms of acceptable evidence shall be consistant with risk associated with users access.

Applicability

This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, and custodians of information resources.

Implementation

Information resource owners or custodians shall require confirmation of the requestor's identity prior to information resource custodians performing any requested changes (including, but not limited to, password reset, change of MFA phone number or device, or change of recovery email address). This control standard does not apply to automated systems such as self-service password reset or MFA device management.