13a. Determination that credential is authentic Business Practices: System Functions: For users of the SCS User Management Service: The credential used to create the signature in the e-Signature case is the UserID/Password supplemented with a Knowledge Query (KBQ) question/answer as a second factor. SCS determines that this credential is authentic by verifying that the UserID/Password and question/answer are associated with the user's registered account profile. See checklist item #3 for details on how SCS securely issues and protects the Pin/Password. See checklist item #5 for details on how SCS creates the temporary X.509 certificate. Supporting Documentation (list attachments): 13b. Determination of credential ownership Business Practices:
13a. Determination that credential is authentic Business Practices: System Functions: For users of the SCS User Management Service: The credential used to create the signature in the e-Signature case is the UserID/Password supplemented with a Knowledge Query (KBQ) question/answer as a second factor. SCS determines that this credential is authentic by verifying that the UserID/Password and question/answer are associated with the user's registered account profile. See checklist item #3 for details on how SCS securely issues and protects the Pin/Password. See checklist item #5 for details on how SCS creates the temporary X.509 certificate. Supporting Documentation (list attachments): 13b. Determination of credential ownership Business Practices:
CROMERR-Shared-Services-Checklist-02072014.docx