Security has to get involved to complete the ESR (external security review) before even considering bringing in the application to the organisation. then the new application has to go through an application security review where validation and verification happen. once the application security review completed, it can go for a proof of concept (PoC) OR to the production depends on the organisation plan.

A copy of a computer disk is considered hearsay, because unless it has been copied in a forensically approved manner, it is not credible evidence.

Section: Security Architecture and Engineering

Another factor that must be taken into account when determining the necessary FAR and FRR for your organization is the actual quality of the fingerprints in your user population. ABC's experience with several thousand users, and the experience of its customers, indicates that a percentage of the populations do not have fingerprints of sufficient quality to allow for authentication of the individual. Approximately 2.5% of employees fall into this group in the general office worker population. For these users, a smart card token with password authentication is recommended.