Differences

This shows you the differences between two versions of the page.

--- wiki:policies:dualauth [2022/01/21 21:21]
katcow
+++ wiki:policies:dualauth [2023/10/06 21:53] (current)
katcow
@@ Line 10: / Line 10: @@
 ===== III. Policy =====
-Nested Knowledge will implement multi-factor authentication (MFA) on an ad-hoc basis. We will evaluate the risk and sensitivity or personal and organizational data, such as personal employee data, user data, intellectual property, and financial information, on an ongoing basis. Evaluation will be based on our data classification system.
+Nested Knowledge will require multi-factor authentication (MFA) on all internal systems by default. Nested Knowledge will make exceptions on an ad-hoc basis. We will evaluate the risk and sensitivity or personal and organizational data, such as personal employee data, user data, intellectual property, and financial information, on an ongoing basis. Evaluation will be based on our data classification system.
 ==== Communication ====
@@ Line 27: / Line 27: @@
 In cases where a client grants Nested Knowledge access to data with the explicit requirement of multi-factor or other authentication in order to access the data, we will adhere to the level of authentication required by the client. Where clients upload data to the Nested Knowledge platform or to any cloud managed by Nested Knowledge without explicit requirement, we will adhere to the level of authentication outlined in this policy.
+=== Cloud Based Applications ===
+Our most sensitive systems, such as our cloud resources on AWS do require MFA–we use virtual MFA device authentication (specifically, the Google Authenticator app.
 ===== Revision History =====
 ^Author^Date of Revision/Review^Comments|
+|K. Cowie|10/06/2023|Updated|
 |K. Cowie|11/24/2021|In progress.|
 |K. Holub|11/24/2021| |
 |K. Kallmes|11/26/2021|Draft approved|
+[[:wiki:policies|Return to Policies]]

Nested Knowledge

User Tools

Site Tools

Differences

Page Tools