Enforcing Multi-Factor Authentication (MFA) for all BigChange Users

What do I need to do?

It is imperative that your BigChange System Administrators complete the MFA setup process as soon as possible to avoid any disruption to your services.

Enable MFA. Please follow the detailed step-by-step instructions to set up MFA on all user accounts as soon as possible (Securing your BigChange System using Multi-factor Authentication and IP Settings – BigChange)

Inform Your Team. Ensure that your team is aware of these changes and that they complete the MFA setup on their accounts promptly. See Setting Up MFA as an individual Web User for the first time

When is this happening?

Act now. The deadline for enabling MFA voluntarily is 31st August 2024. After this date, we will begin the process of planning enforcement of MFA in phased batches, starting in September. Completing this setup now will help you avoid any potential disruptions and ensure continued secure access to your BigChange accounts. Delaying these actions could result in unnecessary downtime for your users.

Can I Opt Out?

No, opting out of MFA is not an option. Given the risks, MFA is mandatory to protect both your data and the integrity of our system.

Why is MFA important?

Multi-Factor Authentication (MFA) is a vital security measure that greatly enhances the protection of your sensitive data and systems. This article explains why MFA is crucial and offers solutions for customers who may face challenges with its implementation. If you don't know what MFA is or would like to learn more, please read our support article, Securing your BigChange System using Multi-factor Authentication and IP Settings – BigChange

Enhanced Protection Against Unauthorised Access

Increased Security: MFA significantly reduces the risk of unauthorised access, even if passwords are compromised. This extra layer of security is essential for protecting your sensitive accounts and data.

Strengthening Trust and Reputation

Building Trust: Implementing MFA demonstrates a strong commitment to security, boosting your reputation and building trust with customers and partners.

Ensuring Compliance with Key Standards & Accreditations

Meeting Standards: MFA helps you comply with standards like UK Cyber Essentials Plus and ISO 27001, which are crucial for maintaining compliance.

Mitigating Phishing Risks

Phishing Protection: MFA provides robust protection against phishing attacks, even if credentials are compromised. This is particularly valuable for users on personal devices.

Preparing for Future Cyber Threats

Future-Proofing: MFA prepares you for the evolving cybersecurity landscape, securing your digital assets against future threats.

Challenges Implementing MFA?

Customer Success Review

Licensing complications: Our Customer Success team can review situations where your licensing usage complicates MFA implementation.

Alternative MFA Options

Desktop plugins: For those without mobile phones, alternative MFA options using Chrome desktop plugins are available, though we cannot officially endorse third-party methods.

Reducing MFA Prompts

IP whitelisting: You can whitelist your office subnet to reduce MFA prompts from trusted locations. To do this, see the section Whitelisting IP Addresses in our article Securing your BigChange System using Multi-factor Authentication and IP Settings – BigChange

Implementing MFA

To setup MFA for all your Web Users, including whitelisting your trusted locations IP addresses, follow the step-by-step instructions within our support article, Securing your BigChange System using Multi-factor Authentication and IP Settings – BigChange

Conclusion

MFA is a critical, non-optional security measure that significantly enhances the protection of your sensitive data and systems. For detailed instructions on how to set up and use MFA, please view our support article Securing your BigChange System using Multi-factor Authentication and IP Settings – BigChange