What do you think are the most important factors to consider when picking an MFA solution?

Security & GRC Identity & Access Management (IAM)Vendor/Product Assessment+1 more

278 views1 Upvote5 Comments

Sort By:

Oldest

Director of IT in Healthcare and Biotecha year ago

Having been on both the end of using a company MFA and also putting in one:
* compatibility with existing solution(s)
* secure
* multiple device options for users, a few % will not have smartphones.
* transparent vendor (esp. in relation to security issues)
* ease to use

Other considerations:
* SaaS based
* Part of greater SSO/directory solution
* ease of integration and troubleshooting

CEOa year ago

I would look for tools that are phishing resistant - MFA is frequently bypassed by session lengths that are too long. I would evaluate tools that are FIDO 2 aligned.

Senior Information Security Manager in Softwarea year ago

Realize that, as Roger Grimes writes in ‘Hacking Multifactor Authentication’, that every MFA solution can be hacked. They are far from bulletproof. And it is critical that they be configured correctly.

https://amzn.to/46k5VGv

Please join or sign in to view more content.

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Global Head of AI, Data & Analytics in Softwarea year ago

Session length, ease of use and unlikely for an accidental acceptance (not just a yes or no pop-up, put in a number)

Chief Information Security Officer in Healthcare and Biotecha year ago

1. Usability and User Experience
2. Integration Capabilities
3. Scalability and Flexibility
4. Management and Administration
5. Reliability and Availability
6. Cost and Total Cost of Ownership
7. Compliance and Industry Standards
8. Vendor Support and Reputation

Content you might like

We are a large manufacturing company with over 17,000 associates, about half of whom have company-provided cell phones. We average two lost devices per week, which seems low, but executive management is concerned and wants to know if our numbers are typical compared to other companies. My questions are: 1. Do other companies also struggle with lost or stolen devices? 2. What is the average number of lost devices per week? 3. Are there repercussions for associates who lose devices due to carelessness or negligence?

Mobile Device Management (MDM)Mobile Devices Security+2 more

VP of IT in Retail3 days ago

My previous organization implemented a strict one-strike policy for lost or damaged devices. While the first incident was considered an accident, repeat offenders were required to reimburse the company for the lost or damaged ...read more

82 views1 Comment