← CIS Controls v8 in plain English

6.3

Control 6 / Access Control Management

Require MFA for Externally-Exposed Applications

Think of it likeUsing a second lock on the front door for added security.

In plain English

The family requires a second layer of protection (MFA) for accessing applications that can be reached from outside the home, ensuring extra security against unauthorized access.