Skip to main content

Deloitte and the need for 2FA on Admin accounts

Posted by: root 7 years, 2 months ago

Deloitte Touche Tohmatsu Limited has 263,000 employees.  That's an astounding number of people, computers, networks, access points etc, etc.  Very hard to keep attackers out of such a vast network with so many needs and uses.  It would cost a lot of money to provide 2FA for all those users.  It would take a lot of effort to monitor the SIEM events for all those users.

However, if they are typical of organizations their size, they probably have a ratio of 1:50 IT to employees (maybe that's off big time, but you will get the drift).  That means that they have about 5,260 IT staff.  Let's call it 5,000 admins - really most IT workers aren't admins, so these numbers are high.  That would cost $60,000 per year to add WiKID 2FA to those accounts.  Now, think about how much easier the log management, SIEM events, etc etc will be versus 263,000 employees.  

I am not saying you can forget about everyone else, but preventing attackers from escalating is cheaper and easier than preventing infiltration.

Please, please use 2FA for admin accounts.

 

Current rating: 3

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom