Remote contractors receive municipal accounts from an emailed spreadsheet with no identity proofing. What registration practice should replace that process?
Select an answer to reveal the explanation.
Short Explanation
Emailing a spreadsheet of new logins is not onboarding—it is mailing house keys to a vague address. Register people properly and proof who they are before the account exists. Weak file passwords, proofing after a breach, or free-for-all usernames skip the foundation of identity.
Full Explanation
Establishing identity requires registration and proofing steps that verify the subject against trusted evidence before credentials are issued. Spreadsheet-based provisioning without proofing enables impersonation and orphaned or fraudulent accounts. Encrypting a weak process with a trivial password does not meet assurance needs, and deferring proofing until after incidents accepts preventable risk. Sponsored, verified enrollment is a core IAM control for contractors and remote workers.