Use multifactor authentication for privileged and network access
Identification and Authentication · NIST SP 800-171 Rev 2
Requirement
Use multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts.[24] [25].
Discussion
Multifactor authentication requires the use of two or more different factors to authenticate. The factors are defined as something you know (e.g., password, personal identification number [PIN]); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric). Multifactor authentication solutions that feature physical authenticators include hardware authenticators providing time-based or challenge-response authenticators and smart cards. In addition
How this affects your SPRS score
Under the DoD Assessment Methodology, a perfect SPRS score is 110. If this control is not met, Up to 5 points (conditional) may be subtracted from your score. This control has conditional scoring: a partial implementation reduces the deduction to 3 points.
Want your estimated SPRS score?
Answer 15 quick questions covering the highest-impact controls and get an instant estimate.
Estimate my SPRS score →Source: NIST SP 800-171 Rev 2 (public domain) · SPRS weighting per the DoD Assessment Methodology · This is reference information, not an official assessment.