CMMC Level 1 · DefinitionSEC / DEFMFA
Definition
Multi-Factor Authentication
A CMMC Level 1 term. Also written MFA.
Definition
Multi-factor authentication verifies a user's identity with two or more independent factors, such as a password plus a one-time code. It is not one of the fifteen CMMC Level 1 requirements. It is a Level 2 requirement under NIST SP 800-171.
Level 1 asks you to identify users and verify their identity before access, which unique accounts and passwords can satisfy. MFA is a strong safeguard that many small suppliers use anyway. It is simply not one of the fifteen you are assessed against at Level 1.
Term identity
- Term
- Multi-Factor Authentication (MFA)
- Framework
- CMMC · Level 1
- Authority
- FAR 52.204-21(b)(1)