HRM-INT-16Term
Step-up authentication
A response that raises the authentication requirement for a person or session, such as requiring a phishing-resistant factor, because a risk signal fired.
Example
After a leaked credential appears in a breach feed, the identity provider forces the account owner to re-enroll with a hardware key.
Related terms
4"Step-up authentication" (HRM-INT-16), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/step-up-authentication
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.