5.5.2.1
Use Strong User Authentication
Implement Multi-Factor Authentication (MFA)
Use Strong User Authentication – Implement Multi-Factor Authentication (MFA) – Organizations shall implement multi-factor authentication or document all instances where they cannot or make the business decision not to do so.
-
5.16 Identity Management: Manage the entire identity life cycle.
5.34 Privacy and Protection of PII: The organization should recognize and fulfill obligations for preserving privacy and safeguarding Personally Identifiable Information (PII) in accordance with relevant laws, regulations, and contracts.
8.5 Secure Authentication: Implement secure authentication technologies and procedures in line with information access restrictions and the topic-specific access control policy.
-
3.3.8 Protect audit information and audit logging tools from unauthorized access, modification, and deletion.
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.5.2 Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems.
3.5.3 Use multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts.
3.5.9 Allow temporary password use for system logons with an immediate change to a permanent password.
3.5.10 Store and transmit only cryptographically-protected passwords.
-
3.3.8 Protect audit information and audit logging tools from unauthorized access, modification, and deletion.
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.5.2 Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems.
3.5.3 Use multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts.
3.5.9 Allow temporary password use for system logons with an immediate change to a permanent password.
3.5.10 Store and transmit only cryptographically-protected passwords.