ComplianceCIS Safeguard v8.1
CIS-6.4 Require MFA for Remote Network Access
- Framework
- CIS Controls v8.1
- Control
- CIS-6 Access Control Management
- ATT&CK techniques mitigated
- 5
ATT&CK mappings (CTID)
• T1021 Remote Services — Enabling multi-factor authentication for remote service logons helps minimize the adversary's ability to leverage stolen credentials.
• T1021.001 Remote Desktop Protocol — Enabling multi-factor authentication for remote logins helps minimize the adversary's ability to leverage stolen credentials.
• T1021.004 SSH — Enabling multi-factor authentication for SSH connections helps minimize the adversary's ability to leverage stolen credentials.
• T1021.007 Cloud Services — Enabling multi-factor authentication on cloud services helps minimize the adversary's ability to leverage stolen credentials.
• T1133 External Remote Services — Enabling multi-factor authentication for external-facing remote service accounts to helps minimize the adversary's ability to leverage stolen credentials.
Related
Mitigates · MITRE ATT&CK (5)
Referenced by Compliance · has member (1)
- CIS-6 Access Control Management CIS Control v8.1