DUO MFA Strategic Business Initiatives | Digital Assurance Advisors LLC

Strategic Business Initiatives

When evaluating a new security solution, consider how it may integrate with ongoing or future business initiatives, including legacy systems, bring your own device (BYOD), remote work or the adoption of cloud applications. Other business drivers to consider include compliance regulation requirements, which vary by industry and location.

Secure Everything, Everywhere

CLOUD ADOPTION TODAY Most of your applications and servers might be on-premises, but some may migrate to the cloud in the near future. Check that the authentication solution can easily integrate with your cloud applications. Additionally, if you’re moving away from managing software and hardware on-premises, then you should consider adopting a cloud-based authentication solution that can scale as needed. Make sure your authentication solution protects what’s important both today and in the future. If it’s not easy to use, your users won’t use it.

BRING YOUR OWN DEVICE (BYOD) — REMOTE WORK PROTECTION Many organizations are allowing employees to use their personal devices to get work done. When evaluating authentication solutions, consider how compatible they are with your BYOD environment. Can users use their own devices to complete authentication? Check that your authentication solution provides a mobile app that works with all of the different types of mobile and remote devices your employees use, including Windows, Apple iOS and Android. For flexibility, ensure the solution works with other methods like security keys, mobile push, code generators and phone callback. Can your authentication solution detect potential vulnerabilities in the devices your employees use? Ask your provider how you can get greater visibility and control into your cloud and mobile environment, without requiring users to enroll their personal devices in enterprise mobility solutions (like mobile device management/MDM). If it’s not easy to use, your users won’t use it. Evaluate the usability of your mobile app, for both your users (enrollment, activation and daily authentication) and administrators (user and solution management).

VALIDATION & COMPLIANCE
Remember, it only takes one weak link in the security chain for a breach to affect your organization.
If you deal with any type of sensitive data, like personally identifiable information (PII), protected health information (PHI), customer payment data, etc., you need to ensure your two-factor solution can meet any compliance regulation requirements.

Additionally, your two-factor provider must be able to provide an up-to-date proof of compliance report for your auditors. Ask your provider if their company and solution is audited annually or regularly by an independent third-party auditor.

Check that the vendor’s cloud-based service uses PCI DSS (Payment Card Industry Data Security Solution), ISO (International Organization for Standardization) 270001 and SOC (Service Organization Controls) 2 compliant service providers. It only takes one weak link in the security chain of contractors for a breach to affect your organization.

MONITORING & REPORTING
Ensure your solution comes with detailed logs about your users’ activity so you can create custom reports, ideal for security analysis and compliance auditors. Armed with details about jailbroken statuses, patch levels, browsers and more, you can also take action to prevent opening up your network to known vulnerabilities. Monitoring also gives you insight into any user behavior anomalies or geo-impossible logins – if your user logs in from one location, and then logs in from another location around the world, your security team will know.

Every organization’s environment is unique. Check if the solution provider offers advanced machine learning-based behavioral analytics that can create a risk profile for your specific organization and notify administrators of any unusual login activity.



Digital Assurance Advisors, your personal authority in cyber security, will assist in securing your Authentication Validation needs and more. Contact us for more information or to begin your complementary 30-day Proof of Value! +1.414.236.4200