MFA (Multi-Factor Authentication)

Category: infrastructure

A security control requiring multiple distinct categories of evidence to verify a user identity.

MFA forces the verification of elements spanning three core pillars: something you know (password), something you have (hardware token key), and something you are (biometrics). Deploying hardware-backed MFA is the single most effective control to neutralize credential-stuffing attacks.

Common Examples

• Our corporate governance policy mandates physical hardware MFA keys for all engineers accessing production databases.
• Enforcing strict MFA across the email gateway eliminated ninety percent of credential harvest attempts last fiscal quarter.