A risk-based security approach where additional verification is required only when a transaction or action exceeds a defined risk threshold, rather than applying the same level of friction to every interaction. Step-up authentication dynamically adjusts the verification requirements based on contextual risk signals, balancing security with user experience.