SAMMY UI is optimized for resolutions with a width 1024px and higher.
Maturity Level 1
Maturity Level 2
Maturity Level 3
Maturity Level 4
Maturity Level 5
MFA for admins
I-IH-1-1: MFA for admins
  • Two or more factor authentication for all privileged accounts on systems and applications
Description

Two ore more factor authentication for all privileged accounts on systems and applications.

Risk: One factor authentication is more vulnerable to brute force attacks and is considered less secure.

Simple access control for systems
I-IH-1-2: Simple access control for systems
  • All internal systems are using simple authentication
Description

All internal systems are using simple authentication.

Risk: Attackers a gaining access to internal systems and application interfaces.

Usage of edge encryption at transit
I-IH-1-3: Usage of edge encryption at transit
  • By using encryption at the edge of traffic in transit, it is impossible or at least harder to sniff credentials being outside of the organization.
Description

By using encryption at the edge of traffic in transit, it is impossible or at least harder to sniff credentials or information being outside of the organization. Using standard secure protocols like HTTPS is recommended.

Risk: Evil actors might be able to perform a man in the middle attack and sniff confidential information (e.g. authentication factors like passwords).