Multi-Factor & Phishing-Resistant Authentication
- Multi-factor authentication (MFA) is enforced enterprise-wide, including all remote and privileged access.
- Highly privileged roles use just-in-time privileged access with phishing-resistant hardware security keys.
- MFA exceptions are governed and tracked through conditional-access policies.
Framework Alignment: NIST CSF PR.AA; CIS Control 6; CMMC Level 1 (IA); GDPR Art. 32; ISO 27001:2022 A.8.5, A.5.17
