Bring on the PCI DSS and HIPAA OOB/MFA PUSH !

NIST SP 800-63B is a real GEM! Come to Papa $$$$$$$$$$$

https://www.hhs.gov/hipaa/for-professionals/s...index.html

https://www.hhs.gov/sites/default/files/nist-...-final.pdf
NIST SP 800-53 Rev. 4

https://www.hhs.gov/sites/default/files/Ranso...anguage=es
NIST SP 800-53 Rev. 4

https://nvlpubs.nist.gov/nistpubs/SpecialPubl...0-63-2.pdf
SP 800-63-3, SP 800-63A, SP 800- 63B , SP 800-63C
Also Ref: SP 800-53 versions

https://nvlpubs.nist.gov/nistpubs/SpecialPubl...0-63-3.pdf
Change History 63-1/63-2/63-3

https://nvlpubs.nist.gov/nistpubs/SpecialPubl...00-63b.pdf

Quote:

---

The CSP SHALL employ appropriately-tailored security controls from the moderate baseline of
security controls defined in SP 800-53

---

Quote:

---

5.1.3.2 Out-of-Band Verifiers
If out-of-band verification is to be made using a secure application, such as on a smart phone, the verifier MAY send a push notification to that device.

---

Quote:

---

Biometrics SHALL be used only as part of multi-factor authentication with a physical authenticator (something you have).

---

https://investorshangout.com/post/view?id=4938769

$SFOR/ BST STRONG!!!!