MFA on ERP Access

prevention

Enforce multi-factor authentication for all ERP user and administrator accounts, including service accounts

Category: Access Control

Implementation description (required)

Describe how this barrier is concretely in place. Include who owns it, how it is enforced, and when it was last tested or verified.

Documentation link (optional)

URI to the procedure, policy, system record, test result, or any evidence that this barrier exists and is maintained.

Estimated effectiveness

How effective is this barrier as currently implemented? 0 % = not in place or non-functional. 100 % = fully implemented, tested, maintained, and reliably operating.

50%

Not in place Partially effective Fully effective

0–39% — Low

Not deployed, broken, untested, or bypassed frequently.

40–74% — Moderate

Partially in place but gaps exist; not consistently applied or tested.

75–100% — Strong

Fully implemented, regularly tested, ownership clear, and consistently applied.

Cancel