According to Google, using Multi-factor Authentication can block up to 100% of automated bots, 99% of bulk phishing attacks, and 66% of targeted attacks that occurred during its investigation, as reported earlier this year in a BusinessWire release which estimates the MFA market to reach $28 billion by 2026.
One of the most important factors in the success of an MFA deployment is user adoption. My experiences deploying MFA for thousands of end users is to engage early with the end users. Engagement typically follows a multi-stage process:
1. Leadership Education
It is important for the technology team to reach out to the leadership team on the business and end user side, to explain the benefit, impact to business risk reduction and improved data integrity. Discussions should also include a very high level of the technology and how it works (the concept of Who You Are, and What You Own).
2. Managers Engagement
Managers will be crucial when time comes for go-live to ensure all users have followed the instructions to activate MFA on their accounts. Managers will also provide lists of the users in their departments and their email addresses for the IT team to enable the feature on their accounts, which will allow end users to activate.
- Background on Cyber Security threats and risks
- What is MFA?
- Value Proposition and Benefits
- End User Impact
- Deployment Schedule
- User Guide
- Technical Support
- Learn More
3. End Users
End users will benefit the most from easy to follow user guides that include screenshots, clear step by step process to follow and information to provide the assurance they are moving in the right direction. A short 2-minute video will come in handy, as well as instructions on how to contact technical support should there be access issues. A table of contents of a good user guide is shown below:
- What is MFA
- Why MFA?
- When Will the Change Take Place?
- What Will the Change Look Like?
- Where Can I Find Information on Activating My Account?
- What to Do if I Have Questions?
