What to Provide
(1) A screenshot demonstrating that Multi-Factor Authentication (MFA) is enabled for your cloud console and all users within the cloud console.
(2) A screenshot demonstrating that MFA is enabled for your production data stores or servers using Secure Shell (SSH) access keys and all associated users.
Evidence Format
Screenshots or exported images in a common image file type, such as .jpg, .png, or .pdf.
Additional Guidance
The evidence should demonstrate that MFA is required for all human user accounts.
Associated Unified Control ID | Associated Framework Control |
CTRL-320 | LCL-40 |