NIST 800-53 rev.5/Physical and Environmental Protection/483 of 1011
PE-02 (02)Physical Access Authorizations | Two Forms of Identification
Control family: Physical and Environmental Protection
Control description
Require two forms of identification from the following forms of identification for visitor access to the facility where the system resides: [Assignment: organization-defined list of acceptable forms of identification].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.