← CIS Controls v8 in plain English

6.5

Control 6 / Access Control Management

Require MFA for Administrative Access

Think of it likeUsing a master key that requires both a key and a code to open the safe.

In plain English

The family requires multi-factor authentication for accounts with administrative privileges, adding an extra layer of security for the most critical access points.