IAM-14—Multifactor Authentication
>Control Description
Theme
Type
Policy/Standard
Access Management Procedure>Implementation Guidance
1. Ensure remote connection to the corporate network is invoked via VPN and VPN in turn invokes Multi-factor authentication
>Testing Procedure
1. Inspect Organization's Remote Access Standard to determine whether requirements for remotely connecting to the corporate network are defined. 2. Observe a user remotely connect to the Organization Corporate Network via VPN. 3. Inspect system configuration of VPN software to determine whether Multi-factor authentication is required. 4. Perform a walkthrough of system connecting to Organization network remotely via vpn software to determine whether Multi- factor authentication is required for remote VPN session.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.