Verification & Access Control Policy

Overview

CyberSquad IT Consulting maintains a Verification and Access Control Policy to protect your environment. As the Primary Contact for your location, you are listed as the Authorised Contact — the go-to person for approving sensitive requests.

Please feel free to share this information with your team, so everyone understands the process and why we may need to call an Authorised Contact for approval before carrying out certain jobs or providing access to servers and systems — including for third parties.

Multi-Factor Authentication & Password Resets

• Phone calls relating to Multi-Factor Authentication (MFA) or password resets must come from your verified business number.
• You will be asked to confirm your full name and role.
• If you are calling from a mobile or an unverified number, we will confirm with your Authorised Contact before resetting access.
• Multi-Factor Authentication bypasses are temporary and valid for 12 hours.

Sensitive Access Requests

• Requests must come from, or be explicitly approved by, an Authorised Contact.
• If a request does not come from an Authorised Contact, that contact must be CC'd and provide explicit written approval before we proceed.

Passwords

• Passwords are never sent via email — only by text message or over the phone.
• We do not store passwords for individual users.

Third-Party Access

• Third-party access requires pre-approval from an Authorised Contact.
• If a request is received without the Authorised Contact included, we will follow up for confirmation before proceeding.

Updating Contact Details

To update your verified phone number or your Authorised Contacts, please email the full name and email address of each contact to our admin team. We will confirm the change before it takes effect.

Questions

If you have any questions about this policy or your Authorised Contacts, please get in touch or call us on 1300 300 497 — we're happy to walk your team through it.