Policies and mechanisms must be implemented to ensure that this occurs at all times. A system for who may access what parts of an information system and at what level will need to be in place before the system may be accessed by those individuals. 5.4.1 General Identification Policy. Mechanisms must be in place to establish the identity of any individual attempting to access the information system. 5.4.2 General Authentication Policy.
Authentication is the act of verifying a user's identity in order to prevent unauthorized use.
Schools should establish a consistent method of authentication that fits the facility's needs and which generates a log of all system use. 5.5 Information Integrity. Information integrity refers to information that is complete and uncompromised. Administrators should implement policies related to making sure that information remains its original uncompromised condition. In addition, confidential information should be periodically checked to make sure that it has not been compromised.