💼 8.5.1 MFA systems are implemented.
-
Contextual name: 💼 8.5.1 MFA systems are implemented.
-
ID:
/frameworks/pci-dss-v4.0.1/08/05/01 -
Located in: 💼 8.5 Multi-factor authentication (MFA) systems are configured to prevent misuse.
Description
As follows:
- The MFA system is not susceptible to replay attacks.
- MFA systems cannot be bypassed by any users, including administrative users unless specifically documented, and authorized by management on an exception basis, for a limited time period.
- At least two different types of authentication factors are used.
- Success of all authentication factors is required before access is granted.
Similar
- Sections
/frameworks/pci-dss-v4.0/08/05/01
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 8.5.1 MFA systems are implemented. |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 8.5.1 MFA systems are implemented. |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|