Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Commission questions 2‑factor prompts and email migration during IT report
Summary
During the IT report commissioners discussed Outlook inbox configuration, a two‑factor verification prompt tied to a phone number and whether verified tablets allow account changes; IT staff advised policy decisions about relying on work phone numbers for device verification.
Commissioners raised concerns about two‑factor authentication prompts that asked staff to verify or edit a phone number while setting up a commission mailbox in Outlook, and information systems staff explained how device verification and account settings interact.
A commissioner said adding the commission inbox to a personal profile caused a verification prompt that listed a partially masked phone number and asked whether the user wanted to verify or edit it; the commissioner worried this might allow someone to change the account’s verification number. The information systems administrator explained that a tablet or device already verified as permitted to access an account could be used to change settings tied to that account, and that most employees are tied to work cell numbers. “You’re actually already verified on your tablet, so it probably would have allowed you to change it,” the administrator said, recommending the commission consider a policy to standardize which numbers are tied to accounts.
The discussion concluded with staff saying they would include commissioners in any configuration steps and that the commission should decide if it wants to tie accounts to specific work phone numbers rather than personal devices.
What happens next: IT staff will include commissioners in forthcoming steps for inbox configuration and the commission will consider a policy approach for 2‑factor verification tied to work phones.
