q22- Vinod is a security analyst working with a legal firm. The firm wishes to create a customer portal where their customers can view, upload and retrieve legal documents. These documents will...

Vinod is a security analyst working with a legal firm. The firm wishes to create a customer portal where their customers can view, upload and retrieve legal documents. These documents will contain sensitive business and personal information the firm collects on behalf of their clients. What two suggestions could Vinod make to ensure the firm securely identifies their customers before allowing access to the portal?