Multi-Factor Authentication (MFA) Policy

This document outlines Multi-Factor Authentication (MFA) security mandates designed to safeguard corporate infrastructure, software solutions, and confidential information against unauthorized entry.

This document covers:

• All staff members, independent contractors, and external vendors
• All platforms and programs holding or handling private or sensitive data

MFA is mandatory for entering:

• Corporate email profiles
• Remote connection software and virtual private networks
• Cloud environments (Google Workspace, Microsoft 365, etc.)
• Essential enterprise software
• Elevated and management profiles

Permitted MFA mechanisms comprise:

• Password combined with a One-Time Code (authenticator program or SMS)
• Password combined with biometric confirmation (facial scan, fingerprint)
• Password combined with a physical security key

1. Primary Authentication Personnel must uphold a robust password adhering to the organization’s password guidelines.

2. Secondary Authentication Personnel must supply at least one of the items below:

• • An Item You Possess: authenticator program, physical token, cellular device
  • An Item You Are: biometric confirmation

3. Privileged Access MFA is strictly compulsory for supervisor, administrator, and other elevated-access profiles.

• Personal hardware (BYOD) utilized for entering corporate networks must have MFA activated.
• Telecommuters are required to link via an organization-sanctioned virtual private network supporting MFA.

Exceptions

Waivers demand formal written authorization from the IT Security Manager and must be properly logged.

Enforcement

• Profiles risk having access limited until MFA is active and functioning.
• The IT team will execute periodic reviews to verify compliance.

Support

Reach out to the IT Helpdesk via [support email/phone] for help with MFA configuration or troubleshooting.

Microsoft 365

1. Sign in to your Microsoft 365 profile.
2. Navigate to Security & Privacy configurations.
3. Activate Multi-Factor Authentication and register your authenticator program or mobile device.

Google Workspace

1. Sign in to your Google profile.
2. Navigate to Security configurations.
3. Activate 2-Step Verification and configure your mobile number or authenticator program.

VPN Access

1. Launch your virtual private network client configurations.
2. Activate the MFA feature.
3. Link the virtual private network client to your physical token or authenticator program.

Safeguard your enterprise with appropriate coverage
Achieve confidence knowing you are braced for unforeseen events
Collaborate with professionals familiar with your sector
Secure insurance packages tailored to your specific demands

Do not delay in granting your enterprise the defense it merits.