MFA Rollout Plan

Project Overview

The MFA Rollout Plan project focused on strengthening account security by introducing Multi-Factor Authentication (MFA) alongside improved password security practices.

The project was designed around a small and medium-sized business environment where password-only authentication presents a significant security risk.

The Challenge

Passwords alone provide limited protection against compromised credentials, password reuse, phishing, and unauthorized account access.

The organization required a practical security improvement that could strengthen authentication without creating unnecessary complexity for users.

The Solution

A structured MFA rollout plan was developed covering security assessment, authentication policy, implementation steps, user guidance, testing, and security recommendations.

A controlled cybersecurity lab environment was also used to demonstrate security assessment activities and validate the proposed security improvements.

The project included an assessment using OWASP ZAP and a practical MFA implementation using Google account security controls.

Key Features

• MFA implementation plan
• Password security policy recommendations
• User authentication guidance
• Security assessment
• OWASP ZAP passive web assessment
• Controlled security testing environment
• Google MFA implementation
• Security hardening recommendations
• Risk reduction recommendations
• User awareness and adoption guidance

Outcome

The project produced a practical MFA rollout approach that can help an SME reduce the risks associated with compromised passwords and unauthorized account access.

The final deliverables included an assessment report, security recommendations, MFA implementation evidence, and a walkthrough demonstrating the project.