Question

A financial services firm is launching a fully remote customer onboarding portal. Regulators require strong assurance that each new account holder is a real, verified person before an account is opened, but no in-person branch visit is possible. Which activity in the identity lifecycle must the firm strengthen to meet this requirement?

Accepted Answer

Identity proofing, by validating government-issued evidence and binding it to the applicant during registration

Answer

Authentication, by requiring a FIDO2 hardware key at every login

Answer

Authorization, by applying least-privilege RBAC roles to new accounts

Answer

Session management, by shortening idle timeouts on the portal