Line item 10 states: Ability to provide Knowledge Based Verification Services‐Online using both FCRA or non-FCRA data (Mandatory).
Our question: Knowledge based authentication has increasingly been shown vulnerable to social engineering – while hard/arcane questions are shown to generate usability problems. Please clarify this requirement as being mandatory.
Line item 10 states: Ability to provide Knowledge Based Verification Services‐Online using both FCRA or non-FCRA data (Mandatory).
Our question: Knowledge based authentication has increasingly been shown vulnerable to social engineering – while hard/arcane questions are shown to generate usability problems. Please clarify this requirement as being mandatory.