Spriv blog · Category
Compliance
What PCI DSS, HIPAA and other frameworks require of authentication today.
PCI DSS 4.0.1 and MFA: what requirements 8.4.2 and 8.5.1 demand now
The future-dated PCI DSS requirements have been mandatory since 31 March 2025. MFA is no longer just a remote-access or administrator control: it covers all non-console access into the cardholder data environment, from inside the network too.
Read the post →
Is MFA mandatory under HIPAA yet? The Security Rule update, October 2026
HHS proposed making MFA explicit for every system that touches ePHI in January 2025. Plenty of articles say it is already law. It is not, yet. Here is what applies today and why waiting is still a mistake.
Read the post →
Checkit!
MFA your team will leave switched on
Two free users, two free servers, no credit card. Install in under five minutes.