IA-2.6: Network Access to Privileged Accounts - Separate Device

the information system implements multifactor authentication for network access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access;

the organization defines strength of mechanism requirements to be enforced by a device separate from the system gaining network access to privileged accounts; and

the information system implements multifactor authentication for network access to privileged accounts such that a device, separate from the system gaining access, meets organization-defined strength of mechanism requirements.

Automated mechanisms supporting and/or implementing multifactor authentication capability