As is well known, recent years have seen an exponential increase in cyberattacks aimed at data theft and ransom demands. These attacks primarily exploit the theft of login credentials (username and password) inadvertently shared by users or stolen through database breaches.
Given the severity of the threat, most systems containing critical or confidential data have adopted, or are adopting, a counter-measure based on user authentication known as Multi-Factor Authentication (MFA). These access mechanisms require entering a unique temporary code generated by an application installed on the user's smartphone.
Gesinf, always attentive to cybersecurity issues and following the guidelines of national and international security standards bodies—including the provisions of the Data Protection Authority, for which the adoption of MFA systems is now essential—has introduced the possibility of activating two-factor authentication, known as TOTP, in CRP 2G via a separately purchasable module.
The system is particularly user-friendly, and its adoption protects against potential liabilities related to the fulfillment of appropriate risk containment measures for unauthorized access.
Multi-Factor Authentication (MFA) is an authentication method that requires a user to provide at least two verification factors to gain access to a website, application, or resource.
Since usernames and passwords have proven vulnerable to attacks, organizations wishing to ensure high-level access security are adopting MFA. Applying an additional factor beyond the username and password guarantees superior security by requiring extra information that is simple for authorized users to provide, but extremely difficult for cybercriminals to obtain.
The system proposed by Gesinf is based on the IETF RFC 6238 standard, which utilizes applications easily downloadable from smartphone stores. During the access phase, the user obtains a one-time password (OTP) to be entered at login. Compatible applications include, for example, Microsoft Authenticator and Google Authenticator, available for both Android and iOS.
Attractive pricing incentives are available for subscriptions completed by September 30, 2023.
