Secure authentication
A.8.5
-
Last updated
Applicable
Catalog reference
Implement secure authentication technologies and procedures appropriate to the sensitivity of what is being protected, including multi-factor authentication where warranted.
Narrative — how we satisfy this requirement
Signing in to the identity provider requires multi-factor authentication, and privileged access also requires a hardware security key.