Authentication (Process - IAM)

Manage MFA

1.0 DRAFT

IAM

• Information Security Resilience (IAM Goal) +++

• Compliance Assurance (IAM Goal) ++

• Establish Trust between Parties (IAM Goal) ++

• Optimal Risk (IAM Goal) ++

…

• Organization policies

• IT Systems

• IT Change Management

• IT Project Management

• Design MFA

• Deploy MFA

• Maintain MFA

• Optimize MFA

IT Systems that require MFA

• MFA Compliance Level

• MFA Compliance Ratio

• MFA Deployment Level

• MFA Deployment Ratio

At the level of an organization entity, program or project, the process scope may be defined using the scope dimensions listed below. But at the organization level, the scope must be embraced holistically to effectively manage revocation risks and consider all of these scope dimensions .

• User populations: permanent employees, contractors, partners, customers, consumers, authorities

• Identity categories: humans, robots, processes

• Principal categories: user accounts, technical accounts, service accounts

• Access type: logical, physical (/wiki/spaces/QUOT/pages/67568001)

• IT Systems (business applications, infrastructure, …)

• Organizational scope (region, division, unit, …)

• The