Selecting the Right MFA Solution
Roger A. Grimes · 2020
This chapter covers how to pick the right multifactor authentication (MFA) solution for an organization. Unfortunately, there really isn't a single solution that works best for everyone. What is good for one organization may not work for another. And they are all hackable—in multiple ways. In general, MFA probably decreases cybersecurity risk in most scenarios. But not all. Any good evaluator of MFA solutions needs to be aware that there are scenarios where MFA might actually increase the risk of a successful attack. The chapter describes in detail the various steps in the process for selecting the right MFA solution. The steps include creating a project team, creating a project plan, educating about MFA, determining what needs to be protected, choosing required and desired features, researching/selecting vendor solutions, conducting a pilot project, selecting a winner, and deploying the winning solution to production.