6.4: Require MFA for Remote Network Access
=========================================================
Require MFA for remote network access.

.. list-table::
	:header-rows: 1

	* - Asset Type
	  - Security Function
	  - Implementation Groups
	* - Users
	  - Protect
	  - 1, 2, 3

Dependencies
------------
* Safeguard 1.1: Establish and Maintain Detailed Enterprise Asset Inventory
* Safeguard 4.1: Establish and Maintain a Secure Configuration Process

Inputs
------
#. :code:`GV1`: Enterprise asset inventory
#. :code:`GV3`: Configuration standards

Operations
----------
#. Using :code:`GV1` as a guide, identify and enumerate all authorized remote assets (M1)
#. For each asset identified in Operation 1, check configurations :code:`GV3`
	#. Identify and enumerate assets properly configured to require MFA (M2)
	#. Identify and enumerate assets not properly configured to require MFA (M3)

Measures
--------
* M1 = Count of remote assets
* M2 = Count of remote assets properly configured to require MFA
* M3 = Count of remote assets not properly configured to require MFA


Metrics
-------

Coverage
^^^^^^^^^^^^^^^^^^^^^^^^
.. list-table::

	* - **Metric**
	  - | The percentage of remote assets poperly configured to require MFA
	  - :code:`M2 / M1`

.. history
.. authors
.. license