SekitCrosswalk
ENES
Start now
Sekit CSF · Identity & Access Management · Technical

RCF-0066Strong authentication (MFA)

MFA is technically enforced and cannot be bypassed

Mapping at a glance
RCF-0066Strong authentication (MFA)Identity & Access Management · Technical
A.8.5Secure authenticationISO/IEC 27001:2022PR.AA-01Identities and credentials managedNIST CSF 2.0PR.AA-02Identities proofed and boundNIST CSF 2.0CE4.3Require multi-factor authenticationCyber EssentialsCE4.4Protect passwords against guessingCyber Essentials

RCF-0066 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.5Secure authenticationsupportsThe technical facet enforces MFA in system configuration so sign-in without a second factor is technically impossible, including for legacy protocols and API access.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-01Identities and credentials managedPR.AA-02Identities proofed and bound

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.3Require multi-factor authenticationCE4.4Protect passwords against guessing

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

MFA enrollment evidence
The proof that a second verification step (beyond the password) is required to access important systems.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0064 PolicyRCF-0065 Process

All Identity & Access Management controls

Identity & Access Management
Ask Sekura: “What evidence proves RCF-0066?”
Also via MCP, free with account