Multi-Factor Authentication
What is Multi-Factor Authentication?
An authentication method requiring users to present two or more distinct types of evidence to verify their identity before gaining access.
Terms that appear alongside multi-factor authentication
Each of these is named in at least one of the same controls as multi-factor authentication. The number is how many controls name both.
- authentication 120 shared controls
- access management 26 shared controls
- access control 26 shared controls
- nist 25 shared controls
- remote access 21 shared controls
- privileged access management 17 shared controls
- phishing 16 shared controls
- audit 15 shared controls
Frameworks that govern multi-factor authentication
What the standards actually require on multi-factor authentication
Requirements naming multi-factor authentication across 6 standards, quoted from the control text.
Multi-factor authentication is used to authenticate unprivileged users of systems.
ISM-0974 · Multi-factor authentication is used to authenticate unprivileged users of systems. →MFA on privileged users and important data repositories; phishing-resistant where possible.
E8-MFA-ML2 · Multi-Factor Authentication - Maturity Level 2 →Require multi factor authentication at LoA 3 and 4 combining factors from different categories (knowledge, possession, inherence).
ISO29115-7.2 · Multi Factor Authentication →Use multi-factor authentication for local and network access to privileged accounts and for network access to non-privileged accounts.
171-IA-2 · Multi-Factor Authentication →MFA must be applied to all administrative accounts on cloud services and to all user accounts on cloud services where supported by the provider.
CE-SC.6 · Multi-Factor Authentication for Cloud Services →Determines whether multi-factor authentication is implemented for the required access, including privileged and network access, and whether it cannot be bypassed.
171A-03.05.03 · Multi-Factor Authentication →Questions people ask about multi-factor authentication
What is Multi-Factor Authentication?
Why is Multi-Factor Authentication important for compliance?
Which compliance frameworks address Multi-Factor Authentication?
Where can I learn more about Multi-Factor Authentication?
See how Multi-Factor Authentication applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.