Control: ism-1401; Revision: 5; Updated: Sep-21; Applicability: ALL; Essential Eight: ML3 ​

Multi-factor authentication uses either: something users have and something users know, or something users have that is unlocked by something users know or are.