What specific steps would you take to validate a customer's identity during a CDD process?