PIN se ab SIRF sensitive actions attribute hote hain (bill delete, refund, write-off jaise) — attendance aur leave PIN-free hain, isliye leaked PIN se koi aur us staff ki hazri NAHI laga sakta. Phir bhi der mat karo.
TURANT
- Setup → Settings → Action Guard → staff list → us staff par 'Re-issue' — naya PIN generate + email; purana instant dead. (Ye ekmatra raasta hai; staff ka apna 'Get my PIN' button ab nahi hai.)
- Agar shak hai ki phone bhi kisi aur ke paas gaya, to People → Staff → HR Masters → Staff Faces me us staff ka juda hua PHONE bhi hata do — warna wo phone fingerprint se punch laga sakta hai.
PHIR JAANCH
- HR Masters → ⚠ Face Review kholo — leak window me koi aisi punch jahan PIN sahi tha par FACE mismatch tha? (System PIN sahi hone par bhi face mismatch flag karta hai — proxy jo PIN jaanta hai, yahi pakda jata hai.)
- Attendance register me us staff ki punches ke time/GPS dekho.
- Sensitive actions ka Audit Log check karo (kisne kya kiya).
PREVENTION
- Staff ko sikhao: PIN kabhi share nahi — na saathi ko, na reception ko. Har staff apna khud ka issue kare.
- Face enrollment sab ka complete rakho — PIN leak ho bhi jaye to face layer proxy ko flag kar degi.