FastPass IVM controls the supporters verification of the users’ identity through a dynamic and secure workflow.
Perfect for identity verification for password reset
Hackers use social engineering methods to con the service desk supporters to issue passwords for real users.
Hackers can’t fool FastPass Identity Verification Manager to trust anything but facts. Give control to FastPass and stop the hackers!
FastPass Identity Verification Manager (IVM) prevents voice-based hacking = vishing.
IVM controls the entire verification process, instructing the service desk supporter what questions and tests to do depending on the user’s security profile. IVM can be implemented fast based on FastPass templates.
The IVM Process
When a user calls the service desk to get a password reset then the service desk supporter uses IVM to verify the identity of the caller. A standard process can include:
For each correct or trustworthy answer, IVM credits point to the call. When enough points have been reached, then IVM will release a new password, to be passed on to the user.
All information related to the verification will be logged for monitoring and analysis. All details can be configured individually for the verification steps to fit the organisation’s data and infrastructure and security policies.
IVM can be configured individually to the organization’s security requirements
Different verification processes for different groups
IVM can provide an unlimited number of different processes linked to user groups
IVM can use many different tests to verify the identity of the person such as secret personal information, company information, contextual & dynamic info, tokens & more
Delivering passwords to the user
Can be delivered over the phone or to the user via SMS or private e-mail
Every step of the process is logged and available for monitoring and reporting
Integration to ITSM tools
IVM can be integrated into most modern ITSM tools, so the service desk agent sees IVM as a natural, integrated part of the different services they provide to users
Lessons learned from the Twitter Hack of 2020:
In this video, FastPass discuss the lessons learned from the recent Twitter Hack that happened on July 15th 2020.
To achieve rapid results, IVM is delivered with templates that can be used as basic processes immediately. They correspond to a simple process, an average process, and a heavily secure process.
The templates can then gradually be altered or new ones can be added, as the service desk and IT security agrees that adjustments need to be made.
This means that IVM can be installed and implemented very quickly.
The FastPass Identity Verification Manager suite currently covers
- FastPass Self-Service Password Reset (SSPR)
- FastPass Identity Verification Manager (IVM)
IVM benefits from the data and components of SSPR, so we recommend a combined solution.
IVM increases security and reduces the risks of social engineering, while SSPR delivers productivity and efficiency for both users and the service desk.
The combination of SSPR and IVM is a security solution with a strong business case.
IVM Functional Details
IVM controls the verification process – the service desk supporter assists IVM. This is crucial to prevent skilled hackers with good social engineering techniques take control via the supporter. See table below.