Implement Multi-factor authentication (MFA)

高レベル 1手動レビューibm-i

説明

Multi-factor authentication (MFA) is a layered approach to securing physical and logical access where a system requires a user to present a combination of two or more different authenticators to verify a user's identity for login. Adversaries are increasingly capable of guessing or harvesting passwords to gain illicit access. Password cracking techniques are becoming more sophisticated and high- powered computing is increasingly affordable.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

IBM and third-party vendors provide MFA solutions for IBM i, and organizations often choose to buy and implement one of these solutions or develop an in-house MFA solution. The business should provide implementation details from the vendor or in- house solution to provide an adequate audit procedure.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Evaluate 3rd party MFA solutions available from various vendors or develop an in- house MFA solution.

プロパティ

オペレーティングシステム: すべて
タグ: ibm-ihardening
参照: CIS IBM i V7R5M0 Benchmark v2.1.0 - 4.12 Implement Multi-factor authentication (MFA)