DFS: Implement Multi-Factor Authentication Even If Not Required
The New York State Department of Financial Services (DFS) is urging the entities it regulates to implement multi-factor authentication (MFA) in their cybersecurity programs, regardless of their size. The statement came in an industry letter posted to the department's website on Dec. 7. If your agency is not already using MFA, you may want to consider implementing it soon.While stopping short of amending the Cybersecurity Requirements For Financial Services Companies regulation to require all entities it regulates to implement MFA, the letter declared, "Effective implementation of the Regulation's MFA requirement is one of the most potent ways to reduce cyber risk."MFA is "an authentication method that requires…