We need to turn on MFA for everyone
Plan it like a small project, not a switch. Most problems come from staff who were not ready, not from the technology.
- List every account and every person who signs in, and remove anyone who left.
- Pick the method for each person. An app with number match for most, a security key for anyone without a smartphone.
- Turn it on for admins and email first, then remote access, then everything else.
- Run a test sign in with each person before any deadline.
- Teach one rule: deny any prompt you did not start, and tell IT.
MFA Readiness Checklist
Get every person ready for MFA, with the methods ranked strongest first.
Stop. Check. Report. Scam poster
Eight red flags and three steps. Print it and post it near desks.
Spoke at the ServTraq Innovation Summit on why security starts with MFA, and published a free readiness checklist for agencies.
Read the case