Does CSG's alarm system support multi-factor authentication (MFA)?

Yes. CSG's DMP Virtual KeyPad (VKP) alarm platform supports multi-factor authentication, which can be enabled with a single configuration change — adding a required secondary verification step to the login process for all VKP mobile app and web users.

MFA for alarm system access matters because the ability to arm, disarm, and manage alarm accounts from a mobile device is operationally valuable but also a potential attack surface. If a staff member's VKP credentials are compromised through phishing or password reuse, an attacker with those credentials could disarm branch alarm systems remotely. MFA closes that vulnerability by requiring a second factor that an attacker would not have even with valid credentials.

For financial institutions subject to cybersecurity regulatory requirements, MFA for security system access is increasingly an examiner expectation rather than a best practice suggestion. CSG can enable MFA across your VKP deployment as part of a system configuration review. For institutions that have not yet enabled MFA on their alarm accounts, CSG recommends treating this as a priority configuration item.