CYBERSECURITY
ARTICLE
Two-factor authentication (2FA) and multi-factor authentication (MFA) is available to you on any cloud platform you, or your organisation employ. I have lost count of how many companies we have worked with that have this feature either disabled completely, or worse - the feature is indeed enabled, yet not configured.
This basic feature should not be overlooked as it adds an extra layer of security to your user account(s), making it incredibly difficult for a so-called hacker or impersonator to access your login portal(s), even if they know your password. This is because 2FA and MFA requires not only your password, but a second form of verification, such as an SMS or WhatsApp code sent to your mobile phone device, or better still - an authenticator app.
You should seek to employ 2FA or MFA immediately.
Here’s why:
Having 2FA or MFA enabled means it is significantly more difficult and challenging for a hacker to gain access to your account(s), regardless of whether the password is known or not.
Phishing attacks, where a hacker or impersonator will trick you into revealing your password, are far less effective with 2FA or MFA because the hacker would also need access to your second, perhaps third verification method, e.g. your mobile phone device.
2FA or MFA helps to prevent identity theft by adding an extra layer of protection against unauthorised access to your accounts and more importantly protects your personal information.
There is a lot to be said for knowing your email and/or cloud user accounts are protected by an additional layer of security. This layer significantly reduces the risk of a data breach.
Many industries (e.g. finance and healthcare), are required to implement 2FA or MFA to comply with specific regulations.
We offer an initial Cyber Security audit in line with IASME Cyber Essentials, covering 2FA and MFA. This forms a baseline to improve your IT security posture and provide a pathway for improvement. After all, achieving a high level of security should be seen as an ongoing journey, not a destination.
Head of Cybersecurity
More information can be found here, on our website and via our LinkedIn profile, for queries please email cyber@eocito.com
-
eoCiTO are not responsible for the content ofexternal sites