Topic

Multi-factor authentication

Applicable to

all

History

Sep 2023

Multi-factor authentication is used to authenticate users to third-party online services that process, store or communicate their organisation’s sensitive data.

References to ‘internet-facing services’ were replaced with ‘online services’.

Sep 2023

Multi-factor authentication is used to authenticate users to third-party online services that process, store or communicate their organisation’s sensitive data.

hree existing controls relating to using multi-factor authentication to authenticate users of online services were reworded to ensure consistency of language with similar controls. [ISM-1504, ISM-1679, ISM-1680]