Re: Question About Password Resets

[David Seidl <dseidl () ND EDU>]

Jim
We use a voice recognition process - our helpdesk finds a co-worker who is known to us who we can conference in with 
that person to identify them. It's not ideal, but we can almost always find someone who we do know and recognize. If 
that fails - and it does at times - we don't feel as bad about making them come in with their ID in hand.
David

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jim 
Pardonek
Sent: Thursday, May 16, 2013 12:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Question About Password Resets

We've recently had some issues with our current password reset process, particularly when a faculty or staff member is 
out of town and calls for a password reset.  We also have an issue because our campuses are spread out geographically 
which makes it difficult for someone to come in person.  I apologize if this has been discussed before, but I was 
wondering what other institutions are doing regarding password resets via telephone?  Or do you do something else.  I 
am looking to make a recommendation to "re-tool" our password reset policy and process so any input would be most 
welcome.

Thanks,

Jim


James Pardonek, CISSP, CEH
Information Security Officer
Loyola University Chicago
1032 W. Sheridan Road | Chicago, IL  60660

*: (773) 508-6086