Emergency access procedures for forgotten password

This is a procedural issue. Forgotten passwords are common among users, and the request to retrieve them costs a lot for the organization. This results in a generic password resetting method used by the help desk. This can be easily integrated with Oracle passwords by changing the password and then expiring it immediately. The user logging in will have to set a new password upon logging in.

Policies and procedures in place for Authentication

This is a procedural issue. The organizational audit must ensure that the authentication of users meets certain guidelines to eliminate threats. In all the Chapters on Security in this book, we have covered aspects of authentication schemes and how they can be used.