Legacy court case-management software cannot enforce MFA natively, yet remote clerks must keep using it. What is the most appropriate response?
Select an answer to reveal the explanation.
Short Explanation
When the old court app cannot do MFA itself, do not shrug and leave the door unlocked. Wrap it—proxy MFA, tighten the path, watch it closer—and write down why that wrap is the temporary brace.
Full Explanation
Compensating controls are justified alternatives when a primary control cannot be implemented on a constrained system. For legacy applications lacking native MFA, layered measures such as identity-aware proxies, network restriction, and heightened monitoring can reduce residual risk while the gap is tracked. Ignoring authentication requirements or weakening them further is not acceptable compensation.