Standard Orgs Requirements:

1. NIST Requirements OOB/MFA:
https://csrc.nist.gov/publications/detail/sp/800-63/3/final
http://nvlpubs.nist.gov/nistpubs/SpecialPubli...00-63b.pdf
http://nvlpubs.nist.gov/nistpubs/SpecialPubli...0-53r4.pdf
and 171 applies to all outside that are required to access FED domains:
https://csrc.nist.gov/publications/detail/sp/...ev-1/final

Quote:

---

The requirements apply to all components of nonfederal information systems and organizations that process, store, or transmit CUI, or provide security protection for such components. The CUI requirements are intended for use by federal agencies in contractual vehicles or other agreements established between those agencies and nonfederal organizations.

---

2. PCI Requirements OOB/MFA:
https://www.pcisecuritystandards.org/pdfs/Mul...nce-v1.pdf

Quote:

---

NIST Special Publication 800-63B Digital Authentication Guideline

---

3. HIPAA / NIST guidelines:
https://www.hhs.gov/hipaa/for-professionals/s...index.html
https://www.hhs.gov/hipaa/for-professionals/s...index.html
https://www.hhs.gov/sites/default/files/Ranso...anguage=es

Quote:

---

NIST SP 800-53r4

---

https://www.hhs.gov/sites/default/files/cyber...6-2017.pdf

4. ISO / NIST SP 800-63
https://www.iso.org/obp/ui/#iso:std:iso-iec:t...ed-1:v1:en

$SFOR/BST STRONG!!!!