Cybersecurity · Advanced level

Advanced level · Module 4: Identity, Email and Cloud Security · Lesson 1 of 4

Organisation-Wide MFA

Roll out MFA to everyone without stopping work.

In this lesson you will

  • Plan an MFA rollout
  • Choose authentication methods by risk

Key concepts

MFA rolloutauthenticator appsphishing-resistant methodsexceptions

The lesson

Start with administrators and email, then extend to all users and cloud services. Communicate early, offer help sessions and set a deadline.

Phishing-resistant methods such as security keys and passkeys protect high-risk accounts best; authenticator apps suit most staff.

Record and review any exceptions, and block legacy sign-in methods that bypass MFA.

Step by step

  1. List user groups and risk levels.
  2. Choose methods for each.
  3. Write the rollout timeline.
  4. Plan support and exceptions.

Practice activity

Write the MFA rollout plan.

Expected result: A phased plan with methods, support and exception handling.

Check your understanding

  1. Which accounts should get MFA first?

    Show answer

    Administrators and email.

  2. Why block legacy sign-in methods?

    Show answer

    They can bypass MFA.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.