IAC-06—Multi-Factor Authentication (MFA)

Weight: 9

>Control Description

Automated mechanisms exist to enforce Multi-Factor Authentication (MFA) for: (1) Remote network access; (2) Third-party Technology Assets, Applications and/or Services (TAAS); and/ or (3) Non-console access to critical TAAS that store, transmit and/or process sensitive/regulated data.

>Control Description

>Cross-Framework Mappings

NIST SP 800-53 r5

PCI DSS v4.0.1

CIS Controls v8

SOC 2 TSC

CMMC v2.0

NIST SP 800-171

Canada ITSP 10.171

OSFI B-13

Australia Essential Eight

Australia ISM

India SEBI Guidelines

UK DEF STAN 05-138

SOC 2 TSC (Detailed)

CIS Controls v8.1 (Detailed)

GovRAMP

IMO Maritime Cyber Risk

NAIC Model Law 668

NIST SP 800-171 Rev 3

NIST SP 800-171A Rev 3

NIST SP 800-207 Zero Trust

Data Privacy Management Principles

FBI CJIS

DHS TIC 3.0

CISA CPG

CISA SSDAF

DoD Zero Trust Roadmap

DoD ZTA Reference Architecture

Executive Order 14028

GLBA (16 CFR 314)

NERC CIP

NY DFS 23 NYCRR 500

Ask AI