Australian Information Security Manual ISM-0974: Multi-factor authentication is used to authenticate unprivileged users of systems.

What else in your programme already covers this

This control maps to 5 controls across 4 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Guidelines for system hardening

• ISM-0341 Automatic execution features for removable media are disabled.
• ISM-0343 If there is no business requirement for writing to removable media and devices, such funct
• ISM-0345 External communication interfaces that allow DMA are disabled.
• ISM-0380 Unneeded user accounts, components, services and functionality of operating systems are di
• ISM-0382 Unprivileged users do not have the ability to uninstall or disable approved applications.
• ISM-0383 Default user accounts or credentials for operating systems, including for any pre-configur
• ISM-0408 Systems have a logon banner that reminds users of their security responsibilities when acc
• ISM-0417 When systems cannot support multi-factor authentication, single-factor authentication usin