Why underwriters ask about it
a cloned voice can sound exactly like the owner. It can't know a secret you never wrote down.
How to fix it
- Pick a code word or challenge question with your team, in person. Don't store it in email or chat.
- Rule: any urgent request for money, gift cards, credentials, or customer data — by voice or video — must include the code word.
- Refresh it when someone leaves.
Evidence to keep
a policy line saying a verification code word exists (never the word itself).