AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
IA: Identification and Authentication and Access Control – AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) IA-9: Multifactor authentication for critical areas

What does IA-9 require?

Establish a multifactor authentication system for critical areas. A small-system baseline control (Appendix K, category 4), with remote access the first case; Phase 1 of the tool asks whether remote access enforces MFA.

Maintained by Gerard BlokdykControl text last updated

Other controls in IA: Identification and Authentication and Access Control – AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls