simpl.
サインイン
サイバーセキュリティGRC 16項目

Multi-Factor Authentication (MFA) Rollout Readiness

このチェックリストは英語版です。

Guides planning and execution of an enterprise MFA rollout, covering scoping, authenticator selection, deployment, and support to maximize coverage and phishing resistance.

NIST 800-63BCIS v8NIST 800-53

無料のPDFまたはWord・メールアドレスを入力してダウンロード。

Scope & Planning

  • Are all applications and access points requiring MFA inventoried and prioritized? *
  • Is MFA prioritized first for remote access, privileged accounts, and email? *
  • Are legacy authentication protocols that bypass MFA identified for blocking? *
  • Is an authentication assurance level (AAL) target defined?

Authenticator Selection

  • Are phishing-resistant authenticators (FIDO2/WebAuthn, PIV) chosen for privileged users? *
  • Is SMS/voice OTP avoided as a primary factor where stronger options exist? *
  • Are backup/recovery methods defined that do not weaken assurance? *
  • Is number-matching or push-fatigue protection enabled for push-based MFA?

Deployment & Enforcement

  • Is a phased rollout plan (pilot then broad) defined with rollback criteria? *
  • Are conditional access / risk-based policies configured to enforce MFA? *
  • Is enrollment tracked with a target coverage metric?
  • Are legacy auth protocols blocked once MFA coverage is confirmed? *

Support & Sustainment

  • Is a secure account-recovery and lost-authenticator process documented for the help desk? *
  • Is the help desk trained to resist social-engineering during MFA resets? *
  • Are MFA bypass exceptions documented, time-limited, and reviewed?
  • Is user communication and training provided ahead of enforcement?

Multi-Factor Authentication (MFA) Rollout Readinessチェックリストの完全版をダウンロード

印刷しやすいPDF、または編集可能なWord文書で無料で入手できます。