People will always choose convenience over security.
I'd figure out what the least-technical person (with data access) in the company needs to do their job, and find the friction points that prompt this person to find the path of least resistance.
2FA in general makes a bad solution worse all for the sake of security; it's not long for this world.
I'd figure out what the least-technical person (with data access) in the company needs to do their job, and find the friction points that prompt this person to find the path of least resistance.
2FA in general makes a bad solution worse all for the sake of security; it's not long for this world.