💼 5 The strength of identification and authentication would typically be commensurate with the impact should an identity be falsified. Common techniques for increasing the strength of identification and authentication include the use of strong password techniques (i.e. length, complexity, re-use limitations and frequency of change), utilisation of cryptographic techniques and increasing the number and type of authentication factors used. Authentication factors include something an individual:
a. knows - for example, user IDs and passwords; b. has - for example, a security token or other devices in the person’s possession used for the generation of one-time passwords; c. is - for example, retinal scans, hand scans, signature scans, digital signature, voice scans or other biometrics.
- ID:
/frameworks/apra-cpg-234/c/5
Stats
not available
Description
Empty...
Similar
- Internal
- ID:
dec-c-e1ac81ba
- ID:
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (4)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ AWS Account IAM Password Policy Number of passwords to remember is not set to 24🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS S3 Bucket MFA Delete is not enabled🟠🟢 | 1 | 🟠 x1, 🟢 x6 | no data |
| 🛡️ Oracle IAM Domain Password Policy has weak complexity requirements🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Oracle IAM User MFA is disabled🟢 | 1 | 🟢 x6 | no data |
Internal Rules
| Rule | Policies | Flags |
|---|---|---|
| ✉️ dec-x-2e229fb4 | 1 | |
| ✉️ dec-x-b92b08f4 | 1 | |
| ✉️ dec-x-f7c2faac | 1 | |
| ✉️ dec-z-bb731292 | 1 |