---
title: "Control sign-ins and access"
description: "Control sign-ins and access, family Protect, NIS2 Art. 21(2)(j)"
url: https://www.alt-f1.be/en/table/id/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Control sign-ins and access

Short label: ACCESS

Family: Protect · NIS2 Art. 21(2)(j)
<a id="meaning"></a>

## Meaning

Give each person appropriate access and require suitable proof when they sign in. Multi-factor authentication adds another type of proof.

<a id="why"></a>

## Why it matters

Stolen passwords and unnecessary permissions can give an attacker access to company systems.

<a id="actions"></a>

## What you can do

Use individual accounts, protect important sign-ins and remove access when roles change or people leave. Review administrator accounts regularly.

## Services that can help

Device Shield supports agreed account and identity controls. Requirements and available methods depend on the systems and service scope.

- [Device Shield](https://www.alt-f1.be/en/device-shield.md)

## Official reference — NIS2 Art. 21(2)(j)

> 2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)

> (j) the use of multi-factor authentication or continuous authentication solutions, secured voice, video and text communications and secured emergency communication systems within the entity, where appropriate.
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)(j)

**What this reference concerns:** A password alone is not enough: a second factor to log in, and encrypted channels for calls, video, messages and emergencies.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU