Control: ism-1680; Revision: 0; Updated: Sep-21; Applicability: ALL; Essential Eight: ML3 ​

Multi-factor authentication (where available) is used by an organisation’s users if they authenticate to third-party internet-facing services that process, store or communicate their organisation’s non-sensitive data.