Technology Managers
Helpdesk
must only accept requests for password resets
once it has been established that
the request is from the owner of the user ID
Reset of the password must be constructed to comply with the password standards
and it must be communicated to the owner in a secure out of band manner