OWASPASVS 5.0 requirement

ASVS-V8.4.2 Access to administrative interfaces incorporates multiple layers of security, including continuous consumer identity verification, device…

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V8 Authorization
Section
V8.4 Other Authorization Considerations
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that access to administrative interfaces incorporates multiple layers of security, including continuous consumer identity verification, device security posture assessment, and contextual risk analysis, ensuring that network location or trusted endpoints are not the sole factors for authorization even though they may reduce the likelihood of unauthorized access.