New Zealand Information Security Manual (NZISM)
Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 16.4.37.C.02: 16.4.37.C.02 Two-factor or MFA for privileged account access

Agencies must require two-factor or Multi-Factor Authentication before access to privileged accounts is allowed.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.