PSS-05—Authentication Mechanisms
>Control Description
The Cloud Service Provider provides authentication mechanisms that can force strong authentication (e.g. two or more factors) for users, IT components or applications within the cloud users' area of responsibility.
These authentication mechanisms are set up at all access points that allow users, IT components or applications to interact with the cloud service.
For privileged users, IT components or applications, these authentication mechanisms are enforced.
Additional criteria: The cloud service offers out-of-band authentication (OOB), in which the factors are transmitted via different channels (e.g. Internet and mobile network).
Ask AI
Configure your API key to use AI features.