ISM-1683

Successful and unsuccessful multi-factor authentication events are centrally logged.

Topic
Multi-factor authentication
Applicable to
all

History

Dec 2023
Successful and unsuccessful multi-factor authentication events are centrally logged.
The existing control relating to the centralised storage of multi-factor authentication event logs was merged into the existing control relating to collecting multi-factor authentication event logs. [ISM-1683, ISM-1684]
Dec 2022
Successful and unsuccessful multi-factor authentication events are logged.
Existing controls relating to event logging were amended to increase clarity of intent and to reduce duplication of content. As a result, common guidance was consolidated into the event logging and monitoring section of the Guidelines for System Monitoring.