New Zealand Information Security Manual (NZISM)
Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 16.1.36.C.03: Avoid single-factor changes to MFA details

What does 16.1.36.C.03 require?

Agencies should not allow changes to a user's Multi-Factor Authentication details to be made using only single factor authentication.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls