## 8 Conclusions and Outlook  
Authentication is a critical method to verify that a user is actually the user they pretend to be. To enrol MFA for a higher level of security, several information and concepts have to be in place first. To align the decision for, or against, the exact type of MFA with business management, we proposed IdMSecMan, a security management process tailored for identity management with the integration of visualization and SABSA. We first described a motivating scenario related to the supply chain attack on SolarWinds' Orion software, which used the enrolment of another smartphone to gain control over an account among other things. Next, we gave a brief overview of the background and related work. In the following section, we introduced IdMSecMan with initiation, the phases question, data management, visualization, and interaction, as well as iterations. IdMSecMan wasthen applied to selected areas of the central technical process activities identification (identification with eID), authentication (multi-factor authentication), and authorization (the trust evaluation of risk-based authentication or zero trust architecture). In order to explain MFA in more detail and verify that IdMSecMan was actually usable, we conducted a case study of a university deciding upon increasing security by introducing multi-factor authentication. Last, but not least, we discussed our approach. With IdMSecMan, we gained a flexible process framework for identity management to align decisions with business requirements and the technical setting. Although this approach might seem logical, we noticed that a simple decision might have more consequences than first concluded. IdMSecMan helped to systematically evaluate all aspects of such a decision before actually implementing it. In future work, we plan to gain feedback on the implementation of IdMSecMan in different organizations. This will help us to generalize the transferability and usage of IdMSecMan. The input generated by IdMSecMan will be enhanced by a recursive cyber incident handling support approach, such as PoCyMa [74] or [75], and could lead to situation awareness [76]. Incident handling is a fundamental activity of a security incident response team. In order to improve this task, procedural or decision support systems, which process relevant data, are proposed. This integration could help to sustainably improve aspects which are the cause of security incidents. Last, but not least, we plan to investigate identifying suitable security controls. Conceptualization, D.P. and S.S.; methodology, D.P. and S.S.; validation, D.P., S.S. and W.H. ; writing--original draft preparation, D.P. ; writing--review and editing, D.P. and W.H. ; visualization, D.P. ; supervision, W.H. ; funding acquisition, W.H. All authors have read and agreed to the published version of the manuscript. This research received no external funding. The study was inline with the Ethics Board of the university. Informed Consent Statement: Informed consent was obtained from all subjects involved in the study. The data presented in this study are not publicly available due to privacy reasons. We thank [PERSON], [PERSON], and [PERSON] for the useful input and discussion. The authors declare no conflict of interest. The following abbreviations are used in this manuscript: \begin{tabular}{l l}
2 FA & Two-Factor Authentication \\ AuthNZ & Authentication and Authorization \\ CS & Computer Science \\ COBIT & Control Objectives for Information and Related Technology \\ EA & Enterprise Architecture \\ eID & electronic Identity \\ eIDAS & electronic IDentification, Authentication and trust Services \\ FTP & File Transfer Protocol \\ GDPR & General Data Protection Regulation \\ IAA & Identification, Authentication, and Authorization \\ IAL & Identity Assurance Level \\ ICT & Information and Communication Technology \\ ID & Identity \\ IdM & Identity Management \\ IdMSecMan & Identity Management Security Management \\ IEC & International Electrotechnical Commission \\ IoT & Internet of Things \\ \end{tabular}