Vendor Sheet
ENISA Guidelines for Identity Protection and Phishing Resistant Multi-Factor Authentication
ENISA’s guidelines for identity protection emphasize phishing-resistant multi-factor authentication as critical to cybersecurity and compliance with the EU NIS Directive. The recommendations advise replacing SMS and voice-based verification with stronger methods like FIDO2 tokens or PKI smart cards, enforcing MFA across all remote and critical services, and tightly controlling third-party access. Thales OneWelcome Identity Platform supports these requirements through centralized access management, contextual and adaptive authentication, and passwordless options. It offers scalable, risk-based MFA that aligns with zero-trust principles, ensuring compliance, usability, and resilience against evolving identity-based threats.