simpl.
تسجيل الدخول
حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 16 بند

Multi-Factor Authentication (MFA) Rollout Readiness

قائمة التحقق هذه باللغة الإنجليزية.

Guides planning and execution of an enterprise MFA rollout, covering scoping, authenticator selection, deployment, and support to maximize coverage and phishing resistance.

NIST 800-63BCIS v8NIST 800-53

PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.

Scope & Planning

  • Are all applications and access points requiring MFA inventoried and prioritized? *
  • Is MFA prioritized first for remote access, privileged accounts, and email? *
  • Are legacy authentication protocols that bypass MFA identified for blocking? *
  • Is an authentication assurance level (AAL) target defined?

Authenticator Selection

  • Are phishing-resistant authenticators (FIDO2/WebAuthn, PIV) chosen for privileged users? *
  • Is SMS/voice OTP avoided as a primary factor where stronger options exist? *
  • Are backup/recovery methods defined that do not weaken assurance? *
  • Is number-matching or push-fatigue protection enabled for push-based MFA?

Deployment & Enforcement

  • Is a phased rollout plan (pilot then broad) defined with rollback criteria? *
  • Are conditional access / risk-based policies configured to enforce MFA? *
  • Is enrollment tracked with a target coverage metric?
  • Are legacy auth protocols blocked once MFA coverage is confirmed? *

Support & Sustainment

  • Is a secure account-recovery and lost-authenticator process documented for the help desk? *
  • Is the help desk trained to resist social-engineering during MFA resets? *
  • Are MFA bypass exceptions documented, time-limited, and reviewed?
  • Is user communication and training provided ahead of enforcement?

نزّل قائمة تحقق Multi-Factor Authentication (MFA) Rollout Readiness كاملة

احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.