HRM-MEAS-08Term
Phishing-resistant MFA coverage
The share of the workforce whose primary sign-in uses a phishing-resistant factor such as a FIDO2 key or a platform passkey. Privileged accounts are reported separately.
Example
An identity engineer reports coverage for all staff and for administrators, and lists the accounts still on SMS codes.
Sources
1Related terms
3"Phishing-resistant MFA coverage" (HRM-MEAS-08), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/phishing-resistant-mfa-coverage
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.