---
title: "Osterman Research: We Need to Talk about MFA"
description: Organizations should focus on strengthening how MFA is implemented, and it should reinforce security measures throughout the entire authentication process.
---

[Skip to main content](https://resources.enzoic.com/osterman-talk-about-mfa/#main-content)

[![Placeholder Alt Text](https://resources.enzoic.com/hubfs/raw_assets/public/Enzoic_Flex_Templates/images/enzoic-logo-color.svg)](https://www.enzoic.com/)

[Active Directory](https://www.enzoic.com/active-directory-password-monitoring/) [Account Takeover](https://www.enzoic.com/ato-protection/) [Resources](https://www.enzoic.com/resource-hub/)

[Free Trial](https://enzoic.com/try-now)

![Osterman MFA](https://resources.enzoic.com/hs-fs/hubfs/Osterman%20MFA.jpg?width=500&name=Osterman%20MFA.jpg "Osterman MFA")

WHITE PAPER

# We Need to Talk about MFA

###### ***Osterman Research: Safeguarding Identity Security***

Data breaches and ransomware attacks make headlines every day. These articles routinely comment on the need for multi-factor authentication (MFA). This emphasis can give the impression of MFA as a silver bullet, and that using it can easily prevent breaches.

**However, the reality is more complex.** It is more accurate to say that while the presence of MFA reduces the likelihood of a breach, not all MFA is created equal, and the risk of data breaches continues to rise even as organizations implement MFA.

 We strongly advise:

- organizations should focus on improving and strengthening how MFA is implemented
- it should be part of a broader effort to reinforce security measures throughout the entire authentication process, ensuring that every step is as secure as possible

### View the full report about MFA

[![Enzoic](https://resources.enzoic.com/hubfs/raw_assets/public/Enzoic_Flex_Templates/images/enzoic-logo-color.svg)](https://www.enzoic.com/)

---

© 2026 Enzoic. All Rights Reserved. PO Box 20896 | Boulder, CO 80308

[Privacy Policy](https://www.enzoic.com/privacy-policy/) • [Acceptable Use](https://www.enzoic.com/acceptable-use/)