Topic

Multi-factor authentication

Applicable to

all

History

Dec 2023

Removed

The existing control relating to the centralised storage of multi-factor authentication event logs was merged into the existing control relating to collecting multi-factor authentication event logs. [ISM-1683, ISM-1684]

Dec 2022

Multi-factor authentication event logs are stored centrally.

Existing controls relating to event logging were amended to increase clarity of intent and to reduce duplication of content. As a result, common guidance was consolidated into the event logging and monitoring section of the Guidelines for System Monitoring.