11.6.3 The relevant entities shall to the extent feasible use state-of-the-art authentication methods, in …

Requirement

The relevant entities shall to the extent feasible use state-of-the-art authentication methods, in accordance with the associated assessed risk and the classification of the asset to be accessed and unique authentication information.

Guidance

• Adjust authentication methods based on the associated assessed risk. For example, require additional authentication for high-risk transactions or access to assets of higher criticality.
• Use more stringent authentication methods for assets of higher criticality.
• Ensure each user has unique credentials. Avoid shared accounts and implement strict policies for credential management.

Examples of evidence

• Access control policy documents outlining secure authentication procedures and technologies.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• ENISA -