APRA clarifies expectations on use of multi-factor authentication

The Australian Prudential Regulation Authority (APRA) has written to all APRA-regulated entities on the importance of using multi-factor authentication (MFA) as one of the most effective tools to prevent unauthorised access to sensitive information.

The letter outlines APRA’s observations on gaps in the implementation of MFA across its regulated industries, and notes APRA’s expectation that entities review the coverage of MFA in their operating and technology environments.

The letter is available on the APRA website at: Use of multi-factor authentication (MFA).

/Public Release. View in full here.