The primary security issue is the sharing of passcodes. Facial recognition is a biometric authentication method that verifies a user's identity based on their unique facial characteristics. Unlike passcodes or patterns, which are knowledge-based factors that can be shared or observed, biometrics are inherent to the individual and are not easily transferable. Deploying facial recognition as the screen lock method directly mitigates the risk of credential sharing, thereby increasing the device's security as requested by management.

A. Pattern lock: This is a knowledge-based method, similar to a passcode, that can be easily observed (shoulder surfing) and shared, failing to address the core problem.

C. Device encryption: This is a data protection mechanism that secures data at rest. It is not a screen lock or user authentication method itself.

D. Multifactor authentication: This is a broad security concept requiring multiple authentication factors. Facial recognition is a specific technology (an inherence factor) that fulfills the requirement for a more secure, non-shareable lock method.

1. Apple

Inc. (2024). Apple Platform Security Guide. "Face ID and Touch ID" section. The guide details how Face ID provides intuitive and secure authentication using the TrueDepth camera system and neural networks

creating a mathematical representation of the user's face. This biometric data is unique to the user and encrypted within the Secure Enclave

making it a non-shareable authentication method. (Refer to the "Face ID security" subsection).

2. Google. (n.d.). Android Open Source Project: Implementing Biometrics. The documentation describes how the Android Biometric framework provides a standardized way for apps and the system to use biometric authentication

including face and fingerprint. It emphasizes biometrics as a secure alternative to traditional knowledge-based credentials like PINs or passwords for device unlock. (Refer to the "Biometric authentication" overview).

3. Carnegie Mellon University Information Security Office. (n.d.). Mobile Device Security. University security guidelines frequently recommend enabling biometric features like facial recognition or fingerprint scanning in addition to a strong passcode. This is advised because biometrics tie device access to the physical user

preventing unauthorized access from shared or stolen credentials. (Refer to the section on "Securing Your Device").