Sekit CSF · Identity & Access Management · Process
RCF-0065Strong authentication (MFA)
MFA is consistently applied with no informal exceptions
Mapping at a glance
RCF-0065Strong authentication (MFA)Identity & Access Management · Process
RCF-0065 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.17Authentication informationsupportsTracking MFA enrolment so no account slips through unenrolled turns the MFA requirement into something protecting every credential, not only the ones someone remembered to set up.A.8.5Secure authenticationsupportsThe process facet enrolls every user in MFA on every in-scope system and tracks coverage so exceptions and forgotten accounts do not persist.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
MFA enrollment evidence
The proof that a second verification step (beyond the password) is required to access important systems.
From the Sekit evidence catalog
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0065?”
Also via MCP, free with account