Find controls.

Try

• A.5.15
• ISM-0974
• E8 ML2
• IT.GOV-01.1
• multi-factor authentication
• access control

Popular controls

• ISO 27001A.5.15Access control policies and proceduresSet and apply rules for who can access information and systems based on their security needs.
• ASD ISMISM-0974Multi-factor authentication for unprivileged human users of systemsEvery ordinary (non-admin) staff account must prove identity with two or more factors, not just a password, whenever a person signs in to a system.
• Essential EightE8-MF-ML1.1Require multi-factor authentication for sensitive online servicesEnsure users use multiple ways to verify their identity when accessing sensitive company data online.
• ISO 27001A.5.1Policies for information securityHave clear, approved security policies that everyone knows about and follows.
• ISO 27001A.8.8Management of technical vulnerabilitiesIdentify and address software vulnerabilities to prevent exploitation and security risks.

Prefer to browse? Every control is in the controls library, with filters for framework, category and maturity.