https://dl.acm.org/doi/pdf/10.1145/3440712
Wikipedia: 2FA
ISO 27001 A8.5, A 5.17