Question DCTR-15
Are you requiring multi-factor authentication for administrators of your cloud environment?
Weight | 20 |
High Risk | No |
Required | No |
Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
Describe plans to implement MFA.
Answering "YES"
State which model of MFA you are using.
Reason for Question
2FA/MFA, implemented correctly, strengthens the security state of a system. 2FA/MFA is commonly implemented and in many use cases is a requirement for account protection purposes.
Follow-Up Inquiries
Ask the vendor about hardware and software options, future roadmap for implementations and support, etc.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]