New Zealand Information Security Manual (NZISM)
Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 16.7.44.C.05: Phishing-resistant MFA for administration accounts

What does 16.7.44.C.05 require?

Where agencies have MFA in place, they should use phishing-resistant MFA for administration accounts.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls