SekitCrosswalk
ENES
Start free trial
Sekit CSF · Identity & Access Management · Technical

RCF-0066Strong authentication (MFA)

MFA is technically enforced and cannot be bypassed

Mapping at a glance
RCF-0066Strong authentication (MFA)Identity & Access Management · Technical
A.8.5Secure authenticationISO/IEC 27001:2022 · Annex A controlsPR.AA-01Identities and credentials managedNIST CSF 2.0PR.AA-02Identities proofed and boundNIST CSF 2.0CE4.3Require multi-factor authenticationCyber EssentialsCE4.4Protect passwords against guessingCyber Essentials

RCF-0066 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.8.5Secure authenticationsupportsThe technical facet enforces MFA in system configuration so sign-in without a second factor is technically impossible, including for legacy protocols and API access.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-01Identities and credentials managedPR.AA-02Identities proofed and bound

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.3Require multi-factor authenticationCE4.4Protect passwords against guessing

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

MFA enrollment evidence
The proof that a second verification step (beyond the password) is required to access important systems.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0064 PolicyRCF-0065 Process

All Identity & Access Management controls

Identity & Access Management
Ask Sekura: “What evidence proves RCF-0066?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.