Compromised credentials are a huge threat to companies today. Why? The attacker is actually using valid (that is, stolen but valid) credentials, so why would your antivirus, firewall, and other technologies you might have in place flag anything unusual? Your tools assume people accessing your network are who they say they are.
This threat is now well known among organizations, but many of them still are not doing what needs to be done about password security. A couple of years ago, we surveyed 500 IT security managers in the US and UK, and the results showed that only 38% of organizations use multifactor authentication (MFA) to better secure network credentials. Sadly, more recent research shows that things haven’t changed much.
Why Are Organizations Reluctant to Adopt MFA?Here are some myths that plague MFA:
Only large enterprises should use MFA.This is a common misconception. Many organizations believe that a company needs to be a certain size to be able to benefit from MFA. They’re wrong. Using MFA should be a key security measure for any company, regardless of size. The data to protect is as sensitive and the disruption as serious in any company. And using MFA doesn't have to be complex, costly, or frustrating.
MFA should only be used to protect privileged users.Wrong again. In most organizations, most employees are considered to have access to valuable data, so they r ..
Support the originator by clicking the read the rest link below.
