In progress
Retire voiceprint as an authenticator
Voice is now evidence of possession of a file, not of a person.
No compiled flow or public database names this control yet.
Who should own it
Banks and carriers
Enterprises
How quickly it can land
Weeks
A dedicated squad can land it inside two months.
Expedited implementation
3 weeks
21 calendar days with a crash team
Normal implementation
3 months
90 calendar days as a planned program
Risk this mitigates
12Given that cloned executive and family voices are already being used to bypass approval chains and extract funds, there is a possibility of an organisation or household treating a synthetic voice as an authentic instruction resulting in direct financial loss, and the collapse of voice as an authenticator.
Residual composite 12 · already acceptable
Effect if implemented
Applied to every failure scenario on that risk, then re-ranked. Axes are clamped at 1.
- Likelihood
- −1
- Consequence
- −0
- Urgency
- −1