Cloud service customer: according to the risks identified, use sufficient authentication techniques, such as multi-factor authentication, for its cloud service administrators' access to the administrative capabilities of the cloud service. Cloud service provider: provide sufficient authentication techniques for authenticating the customer's cloud service administrators to the administrative capabilities, according to the identified risks, for example by offering multi-factor authentication or enabling third-party multi-factor mechanisms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.