NIS2 puts MFA on the agenda for privileged access. In a modern IT environment, that may mean enabling a control the system already supports. On a plant floor, the account may lead to a controller, engineering workstation or vendor system that was installed 20 years ago and cannot take a second factor.