This implementation automates reporting to verify compliance with GC Cloud Guardrails. SSC and TBS review the results. Cette mise en œuvre automatise la production de rapports afin de vérifier la conformité aux mesures de sécurité infonuagique du GC. SPC et SCT examinent les résultats.
Other
7
stars
4
forks
source link
GR1 | Validation 1| All Cloud User Accounts MFA Check (M) #132
ItemName ENG: “All Cloud User Accounts MFA Check (M)”
ItemName FR: “Vérification de l’AMF de tous les comptes d’utilisateurs infonuagiques (M)”
Description: This is a new control. The intention is to determine if all Azure Native User Accounts have MFA authentication methods for their logins.
*Ideal New Control Flow
Getting a list of Azure Cloud Native Accounts automatically (MS Entra ID) and,
then determining if every user has at least two methods of authentication configured.
If all identified accounts (excl. BG Accounts) have 2+ methods of authentication then the department is compliant
Note: This check excludes the breakglass accounts provided by the department in the config.json.
If any of the identified accounts (excl. BG Accounts) do not have MFA then the department is non-compliant
Acceptable MFA Configurations
ItemName ENG: “All Cloud User Accounts MFA Check (M)” ItemName FR: “Vérification de l’AMF de tous les comptes d’utilisateurs infonuagiques (M)”
Description: This is a new control. The intention is to determine if all Azure Native User Accounts have MFA authentication methods for their logins.
*Ideal New Control Flow
Getting a list of Azure Cloud Native Accounts automatically (MS Entra ID) and,
then determining if every user has at least two methods of authentication configured.
If all identified accounts (excl. BG Accounts) have 2+ methods of authentication then the department is compliant Note: This check excludes the breakglass accounts provided by the department in the config.json.
If any of the identified accounts (excl. BG Accounts) do not have MFA then the department is non-compliant Acceptable MFA Configurations
Other options
Primary objective: each user requires at least one additional authentication methods other than email or password. User should have two authentication methods available to them. Microsoft Entra authentication methods API overview - Microsoft Graph v1.0 | Microsoft Learn
Messages/ Comments Suggested English
Messages/ Comments Suggested French