Make sure the request has some kind of independent verification.  This justifies the business case for the request.  Examples include:

• Notification from Human Resources concerning a new hire or promotion
• Notification from the user's manager
• The fact that the request came from Change Management, Service Execution, or Request Fulfillment