3.5.3 Use multi-factor authentication for local and network access to privileged accounts and for network access to non-privileged accounts.
To go back to the NIST 800-171 Controls page click here.
Guides
- SANS Institute – Two-Factor Authentication: Can You Choose the Right One?
- Schneier on Security – More on Two-Factor Authentication
- DFARS FAQ Questions Q41-46
- Remediant Whitepaper
- Manage Windows Hello for Business in your organization
- Ping Single Sign-On Overview
- Privileged Session Manager – Overview
- Intel Authenticate Solution
Example Tools
- Thales Group
- RSA SecurID
- HID Global
- Exostar
- Windows Hello For Business
- Remediant SecureOne
- Ping Identity
- Intel Authenticate
Videos
- BrightTALK – Subverting and Protecting Multi-Factor Authentication
- BrightTALK – Risks Posed by Legacy Authentication
- Windows Hello for Business
- Intel Authenticate Identity Protection
- Ping Identity
Vendor Documentation
- Duo – Two-Factor Authentication Evaluation Guide
- Symantec – Two-Factor Authentication White Paper
- Bitpipe – Authentication White Papers
- Remediant White Paper on Control 3.5.3
- Windows Hello for Business