6.3 IG1

Control 6 / Access Control Management

Require MFA for Externally-Exposed Applications

Think of it likeUsing a second lock on the front door for added security.

In plain English

Any application reachable from outside the home requires a second proof of identity (MFA) before it opens.