What is the form used for

It documents authorization to change account recovery and authentication settings, creating a verifiable record for security teams and auditors to rely on during reviews.

Who can sign the form

The account holder or an authorized representative with documented authority may sign; require evidence of authority for third-party signers to avoid improper resets.

Is an electronic signature valid

Yes when it meets ESIGN/UETA criteria: intent to sign, consent to conduct business electronically, attribution to the signer, and reliable record retention.

When is notarization required

Notarization depends on jurisdiction and the form’s legal effect; high‑risk or third-party authority changes often require notarization or witnesses per state rules.

How do I correct a submitted form

Submit a new corrected form with a cross-reference to the original transaction; include approver re-signatures and note the reason for the correction.

Can a reset be revoked

Yes if detected early; document the revocation, restore prior settings where possible, and preserve audit logs showing the revocation action and approver.

Electronic Signature
Templates
Miscellaneous
Security Information Reset Form

Security Information Reset Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Security Information Reset Form

Recitals

WHEREAS, Requesting Party: has requested one or more security credential resets for accounts and access associated with the systems identified in this form; and

WHEREAS, Service Provider: is authorized to perform verification, credential reset, and account reconfiguration services under the terms set forth below; and

WHEREAS, the parties desire to document the scope, authorization, verification, payment terms, and liabilities related to the requested security information reset.

Request Details

Requestor Name Employee or Client ID Department / Organization Primary Contact (email / phone) System / Application Affected Account Identifier / Username

Requested Reset Actions

Password reset

Multi-factor authentication (MFA) reconfiguration or replacement

Security questions / challenge responses reset

Account unlock / removal of access hold

Other (describe)

Verification Performed

Identification presented: Driver's license Employee badge Passport

Additional verification notes

Scope of Work

The Service Provider will perform the actions explicitly requested above and any ancillary steps reasonably necessary to restore authorized access in accordance with accepted security practices. The Service Provider will document credentials issued, steps taken, and any exceptions recorded.

Detailed scope (describe tasks, limitations, and deliverables)

Payment Terms

Amount due for services: $

Payment schedule Late fee

Term and Termination

Start date: End date:

Notice period for termination (days)

Either party may terminate this agreement for material breach if the breaching party fails to cure within the notice period specified above. Termination does not relieve either party of obligations accrued prior to termination.

Confidentiality

All credentials, authentication secrets, multi-factor device identifiers, and related sensitive information disclosed, created, or accessed in connection with the reset shall be treated as Confidential Information. The recipient shall not disclose such Confidential Information except to personnel with a need to know and shall employ reasonable safeguards at least as protective as those used to protect its own confidential information. This obligation survives termination of this agreement.

Governing Law

This agreement shall be governed by and construed in accordance with the laws of the State of , without regard to its choice-of-law principles.

Entire Agreement

This form, together with any exhibits or attachments referenced herein, constitutes the entire agreement between the parties with respect to the subject matter and supersedes all prior or contemporaneous oral or written agreements. Any amendment must be in writing and signed by authorized representatives of both parties.

IT Completion Confirmation

Completed by (name and role) Completion date Summary of actions taken

Acknowledgement and Certifications

By signing below, each signing party certifies that: (a) they are authorized to enter into this agreement on behalf of the named party; (b) all information provided in this form is true and accurate to the best of their knowledge; and (c) they understand the security and operational implications of the requested reset and accept responsibility for the secure handling of any newly issued credentials.

Requesting Party (print):

By:

Date:

Service Provider (print):

By:

Date:

What the Security Information Reset Form Is

A Security Information Reset Form documents a request to reset account recovery elements such as security questions, secondary contact details, multi-factor settings, or account recovery tokens. Organizations use it to verify requester identity, record authorization, and trigger controlled changes to authentication data. The form collects identity evidence, authorization signatures, and processing instructions to create an auditable trail for security teams and compliance reviewers.

Why this form matters for account and compliance control

The form centralizes identity verification, documents consent to change security controls, and produces an auditable record that supports incident response, regulatory reviews, and internal control. It reduces ad hoc resets, mitigates social engineering risks, and helps demonstrate compliance with ESIGN/UETA requirements where electronic records are used.

Who typically completes and reviews this form

Teams who manage user identity and account recovery typically create or require this form before any security information change is applied.

Help desk and IT support staff who verify identities and initiate resets for end users within internal policies.
Human resources or account owners when changes affect employment systems, payroll access, or staff directory credentials.
Security operations and compliance teams that approve elevated requests and retain the audit trail for reviews.

Recipients and reviewers vary by organization size: smaller teams combine roles while larger organizations separate requester, approver, and security operations duties.

Step-by-step: completing a Security Information Reset Form

Follow these steps to collect authorization, verify identity, and route an auditable request for a security information reset.

01

Identify requester: Enter requester's name and account ID for initial matching.
02

Verify identity: Confirm ID using approved methods such as photo ID or MFA challenge.
03

Specify changes: List the exact items to reset (questions, phone, authenticator app).
04

Approve and log: Manager or security approver signs and ticket is recorded.

Configuring a digital workflow for resets

Set up the online workflow to collect identity evidence, assign approvers, and capture an audit trail for every reset request.

Field	Configuration
Authentication Method	Email link \| SMS code \| KBA
Field Types	Text, date, signature capture
Routing Order	Requester → Manager → Security approver
Notifications	Email alerts and ticket creation

Where to submit and how the request moves

After completion, route the form to the designated recipients to trigger verification, approval, and system updates in a controlled order.

Submit to Security Team: Security receives and schedules verification checks.
Notify HR or Account Owner: HR confirms employment status when applicable.
Update Identity Provider: Change applied in IdP after approval and logging.
Close and Archive: Ticket closed and signed copy stored for audits.

Digital signing and platform needs

Choose a platform that captures signatures, timestamps, and a tamper-evident audit trail while supporting required integrations.

Integrations: Salesforce, NetSuite, Microsoft 365
File Formats: PDF, DOCX, HTML supported
Signer Authentication: Email, SMS, KBA

Typical timelines and processing expectations

Processing windows depend on verification strength and organizational SLAs; document expected turnaround times to manage user expectations.

Immediate Acknowledgment:

System or help desk confirms receipt within 1 business day.

Identity Verification:

Complete within 24–72 hours depending on required checks.

Approval Window:

Manager or security approval typically within 3 business days.

Third-party Verification:

External checks (ID vendor) may take 7–14 days.

Notice Periods:

Retain a copy and notify affected parties per policy timelines.

Common preparation errors to avoid

Submitting incomplete identity evidence such as a cropped ID photo or missing issuer fields, which delays verification and may require resubmission.
Using inconsistent names or account identifiers compared with system records, causing mismatches and potential denial of the reset request.
Relying on weak authentication like email-only acceptance for high-risk resets, increasing exposure to social-engineering attacks.
Failing to capture an approver signature or audit trail entry, which undermines the record for compliance and incident investigations.

Consequences of incorrect or poorly documented resets

Compliance Violation: Civil fines, contractual liability

Unauthorized Access: Account takeover, data loss

Regulatory Exposure: HIPAA or other penalties

Operational Disruption: Service outages, escalations

Forensic Gaps: Missing audit trail impedes investigations

Reputational Harm: Customer trust erosion

Required data elements on the form

Full Legal Name: Exact name

Account Identifier: Username or numeric ID

Requested Items: Specific resets

Verification Proof: Type of ID provided

Contact Details: Phone and recovery email

Authorizer Signature: Sign and date

Comparing eSignature vendors for Security Information Reset Form workflows

Key commercial factors include starting price, trial availability, bulk send, audit trail, HIPAA support, and envelope or usage caps — signNow appears first for neutral comparison.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No envelope cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Best practices for accurate, auditable reset requests

Adopt consistent controls and documentation standards to reduce risk, speed processing, and preserve evidence for audits and incident response.

Standardize identity proofing

Use a consistent set of acceptable identity proofs and an approved verification checklist so support staff apply the same standard to every request.

Require role-based approvals

Define and enforce who may approve resets at each sensitivity level to prevent unauthorized privilege changes and to maintain separation of duties.

Capture tamper-evident audit trails

Record timestamps, IP addresses, approver identities, and the exact changes made so you can reconstruct events during security reviews or regulatory examinations.

Retain signed records securely

Store signed copies in encrypted archives with access controls and apply defined retention schedules aligned with legal obligations.

Frequently asked questions about Security Information Reset Forms

Answers to common questions about purpose, validity, signatures, notarization, corrections, and revocation to help users and administrators handle requests correctly.

Need help? Contact support

What is the form used for
It documents authorization to change account recovery and authentication settings, creating a verifiable record for security teams and auditors to rely on during reviews.
Who can sign the form
The account holder or an authorized representative with documented authority may sign; require evidence of authority for third-party signers to avoid improper resets.
Is an electronic signature valid
Yes when it meets ESIGN/UETA criteria: intent to sign, consent to conduct business electronically, attribution to the signer, and reliable record retention.
When is notarization required
Notarization depends on jurisdiction and the form’s legal effect; high‑risk or third-party authority changes often require notarization or witnesses per state rules.
How do I correct a submitted form
Submit a new corrected form with a cross-reference to the original transaction; include approver re-signatures and note the reason for the correction.
Can a reset be revoked
Yes if detected early; document the revocation, restore prior settings where possible, and preserve audit logs showing the revocation action and approver.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now