Password and MFA Reset SOP
Restore access for genuine users without giving it to attackers.
The full Password and MFA Reset SOP (all 5 steps, 1 controls, records and measures) is one of 36 editable Word SOPs in the SOP Template Kit: $79.
| Document no. | IT-03 | Department | IT & Security |
1. Purpose
Restore access for genuine users without giving it to attackers.
2. Scope
All reset requests for company accounts.
3. Roles and responsibilities
| Role | Responsibility |
|---|---|
| User | Requests reset. |
| Service Desk | Verifies identity and resets. |
4. Procedure
| Step | Who | What to do |
|---|---|---|
| 1 | User | Use self-service reset where available. |
| 2 | Service Desk | For assisted resets, verify identity by [video call with ID / call-back to HR-registered number / manager confirmation]. |
| 3 | Service Desk | Never reset based on email or chat alone, or on a number given by the caller. |
| + 2 more steps, 1 controls, 1 records and 1 measures in the full SOP. | ||