MFA: why secure sign-in is the most important measure
What is MFA, and why is it the most important security measure for SMEs? In this article you read how multi-factor authentication works and why you want to enable it everywhere.
By Max HoltropIf you take one security measure, let it be MFA. Multi-factor authentication is the simplest and most effective protection against intrusion into your accounts. In this article you read how it works and why it is indispensable. It is also one of the first steps towards NIS2.
What is MFA?
MFA (multi-factor authentication) means that besides your password you need a second step to sign in, for example a code or an approval on your phone. Even if someone knows your password, they cannot get in without that second step. Your account is thereby much better protected.
Why is MFA so important?
Because passwords alone are no longer enough. Passwords leak, are guessed or intercepted via phishing. MFA catches that: it makes a stolen password practically worthless. It is one of the few measures that makes a big difference with little effort, and therefore step 4 in our NIS2 checklist.
Is MFA mandatory?
There is no separate law that literally requires MFA, but it is indispensable in practice and aligns directly with what NIS2 expects: appropriate measures against unauthorised access. More and more insurers and clients also set MFA as a requirement. So waiting is unwise.
On which accounts do you enable MFA?
On all of them, but start with the most important. Email, Microsoft 365 and accounts with access to sensitive data are the most vulnerable. Ultimately you want MFA on every business account, because one unprotected account is enough for an attacker.
How IT-gemak arranges MFA
We set up MFA correctly as part of your IT security, configured so that it is secure without being a burden to your colleagues. That way this foundation is right from the start.
Want to know whether your environment is well set up for this? Schedule a no-obligation consultation. We take a look and arrange it for you.
Good to know
What is MFA?
MFA (multi-factor authentication) means that besides your password you need a second step to sign in, such as a code or approval on your phone. So someone with only your password cannot get in.
Why is MFA the most important security measure?
Because passwords leak, are guessed or intercepted via phishing. MFA makes a stolen password practically worthless, with little effort. It is one of the most effective measures there is.
Is MFA mandatory for businesses?
There is no separate law that literally requires MFA, but it aligns directly with what NIS2 expects and more and more insurers and clients set it as a requirement. In practice it is indispensable.
On which accounts should I enable MFA?
Ideally on all business accounts, starting with email, Microsoft 365 and accounts with access to sensitive data. One unprotected account is already enough for an attacker.
Related services
ICT Security & NIS2
Control over your business information and demonstrable compliance, for the law and for your clients.
Read more →Keeper Password Security
Secure password management for your entire organisation: strong passwords, shared and under control.
Read more →Microsoft 365 security licenses
The right Microsoft security licenses for your organization: advice, setup and management.
Read more →Related articles
NIS2 vs ISO 27001: the difference and the overlap
NIS2 and ISO 27001 are often confused. In this article you read the difference, where they overlap and whether an ISO certification helps you to comply with NIS2.
Read more →NIS2 for accountants: what to look out for
Does your accountancy firm fall under NIS2, and what do your clients expect from you? In this article you read how NIS2 affects accountants, often via the chain, and what you can arrange now.
Read more →Backup requirements under NIS2: why Microsoft 365 alone is not enough
Does NIS2 require a backup, and does Microsoft 365 not make one itself? In this article you read what the backup requirements mean for SMEs and why you need a separate backup of your Microsoft 365 environment.
Read more →Want to spar with a specialist?
Curious what this means for your organisation? Book a no-obligation consult — we’re happy to think along.
