Identity verification for onboarding

Control Design Assessment (CDA)

Procedures evaluating whether the control is designed adequately.

1. 1.Inspect the onboarding workflow configuration to confirm document verification and liveness checks are both required before an account is opened.
2. 2.Confirm the workflow cannot complete onboarding when a liveness or document check fails, without a documented override path.

Control Operating Effectiveness (COE)

Procedures evaluating whether the control operated over the testing period.

1. 1.Select 25 digital onboarding applications from the period and confirm both document and liveness verification were completed.
2. 2.Attempt a test onboarding with a failed liveness check and confirm the application is blocked or routed to manual review.
3. 3.Confirm any override of a failed check was documented and approved.

Linked risks

• Digital onboarding identity fraudmitigation 3

Framework mappings & latest test