Skip to content

Adaptive Authentication

What is Adaptive Authentication?

An authentication approach that dynamically adjusts security requirements based on contextual risk factors such as location, device, and user behavior.

Information Security

Frameworks that govern adaptive authentication

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on adaptive authentication

Requirements naming adaptive authentication across 4 standards, quoted from the control text.

Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue1 control

The organisation requires individuals to use defined supplemental authentication techniques in defined circumstances. No enhancements.

canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::IA-10 · IA-10 Adaptive authentication →
NIST SP 800-53 Rev 51 control

Require individuals accessing the system to employ [Assignment: organization-defined supplemental authentication techniques or mechanisms] under specific [Assignment: organization-defined circumstances or situations].

NIST800-IA-10 · IA-10 Adaptive Authentication →
HKMA TM-G-11 control

HKMA TM-G-1 adjacent modules covered in this framework's scope. TM-G-2 BUSINESS CONTINUITY PLANNING: (a) Business Continuity Governance (TM-G-2.2.1) - Board oversight + BCP committee + crisis management + RACI + ownership;

HKMA-TMG1-Adjacent-TMG2-TME1-OR2-BCP-eBanking-Resilience · TM-G-2 BCP + TM-E-1 e-Banking + OR-2 Operational Resilience Adjacent Modules →
Monetary Authority of Singapore Technology Risk Management Guidelines1 control

Multi-factor authentication should be used at login for online financial services; customer passwords should be end-to-end encrypted in transit and verified only in hardened or tamper-resistant systems;

monetary-authority-of-singapore-technology-risk-management-guidelines::14.2 · 14.2 Customer Authentication and Transaction Signing →

Questions people ask about adaptive authentication

What is Adaptive Authentication?
An authentication approach that dynamically adjusts security requirements based on contextual risk factors such as location, device, and user behavior.
Why is Adaptive Authentication important for compliance?
Adaptive Authentication is a key concept in Information Security. Understanding adaptive authentication helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,049 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Adaptive Authentication?
Adaptive Authentication appears in the requirement text of Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue, NIST SP 800-53 Rev 5, HKMA TM-G-1, Monetary Authority of Singapore Technology Risk Management Guidelines. Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Adaptive Authentication?
Explore our compliance framework pages to see how adaptive authentication applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,049 frameworks.

See how Adaptive Authentication applies across compliance frameworks

Our platform maps 1,049 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.