Control: ism-1679; Revision: 0; Updated: Sep-21; Applicability: ALL; Essential Eight: ML3 ​

Multi-factor authentication is used by an organisation’s users if they authenticate to third-party internet-facing services that process, store or communicate their organisation’s sensitive data.