ComplianceCIS Safeguard v8.1

CIS-6.4 Require MFA for Remote Network Access

Official page ↗
Framework
CIS Controls v8.1
Control
CIS-6 Access Control Management
ATT&CK techniques mitigated
5

ATT&CK mappings (CTID)

• T1021 Remote Services — Enabling multi-factor authentication for remote service logons helps minimize the adversary's ability to leverage stolen credentials. • T1021.001 Remote Desktop Protocol — Enabling multi-factor authentication for remote logins helps minimize the adversary's ability to leverage stolen credentials. • T1021.004 SSH — Enabling multi-factor authentication for SSH connections helps minimize the adversary's ability to leverage stolen credentials. • T1021.007 Cloud Services — Enabling multi-factor authentication on cloud services helps minimize the adversary's ability to leverage stolen credentials. • T1133 External Remote Services — Enabling multi-factor authentication for external-facing remote service accounts to helps minimize the adversary's ability to leverage stolen credentials.

Related

Mitigates · MITRE ATT&CK (5)

  • T1021.007 Cloud Services sub-technique
  • T1021.001 Remote Desktop Protocol sub-technique
  • T1021.004 SSH sub-technique
  • T1021 Remote Services technique
  • T1133 External Remote Services technique

Referenced by Compliance · has member (1)

  • CIS-6 Access Control Management CIS Control v8.1

References