Control Strategy ClientOutOfBandKeyAccess

URI: CSG-ClientOutOfBandKeyAccess

Description: Access to a service Service requires the user Human to supply a password, and then enter a key which is sent to them via a separate channel into their client application Client.

(empty)

CC.AX.CCC-nS.6.1.3

Client Client unable to use 2-factor authentication to access service Service: if service Service requires clients to authenticate using a second factor (e.g. a one time key or out of band key exchange), but this is not available to Client then access will be impossible.

(empty)

OutOfBandKey at Role_Human

OutOfBandKeyVerifier at Role_Service

Password at Role_Human

PasswordVerifier at Role_Service

Control Strategy ClientOutOfBandKeyAccess

Mitigated Threats (0)

Blocked Threats (1)

CC.AX.CCC-nS.6.1.3

Triggers Threats (0)

Control Sets (4)