Questions to help authenticate a person:
1. Who are you? Is this person an employee, a partner, or a customer? Different levels of authentication would be set up for different types of people.
2. Where are you? For example, an employee who has already used a badge to access the building is less of a risk than an employee logging on from a remote site.
3. What do you want? Is this person accessing sensitive or proprietary information or simply gaining access to benign data?