[PCI DSS 1.x] 8.5.2 Verify user identity before performing password resets

[pcinetwork]

8.5.2 Examine password procedures and observe security personnel to verify that, if a user requests a password reset by phone, email, web, or other non-face-to-face method, the user’s identity is verified before the password is reset