Identify and discuss an alternative to challenge questions as a means of authentication for the password recovery/reset process.

How can the local government officials convince residents that this “invasion of privacy” (collection of personal information during account registration) is necessary and for their benefits?

Should the local government suspend implementation of the new policy for 90 days (180 days?) to allow members of the public to comment on the new policy? Why or Why not?

Identify and discuss an alternative to challenge questions as a means of authentication for the password recovery/reset process.

Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your posting.

Resources:
https://www.policynl.ca/policydevelopment/policycycle.html
https://www.iacdautomate.org/aboutiacd
https://us-cert.cisa.gov/sites/default/files/ncirp/National_Cyber_Incident_Response_Plan.pdf