Controls within the Scottish Government Public Sector Cyber Resilience Framework require that multi-factor authentication is implemented to cover and manage security risk, defending systems against cyber-attack, detecting cyber security events, and minimising the impact of cyber security incidents. S6W-27822