Identity & Endpoint

Identity & Access

Workforce and reporting-organisation identities · phishing-resistant MFA, adaptive access, just-in-time privilege and identity threat detection

Methods by population

Population	Passkey	Hardware key	Authenticator app	SMS	Status
Key custodians	0%	100%	0%	0%	Met
Security operations	72%	28%	0%	0%	Met
BFIU analysts	81%	19%	0%	0%	Met
MLTFPD supervisors	76%	12%	12%	0%	At risk
RO compliance officers	58%	6%	35%	1%	Gap
Service accounts	—	—	—	—	Exempt

Authentication policy

Number matching on push

Defeats MFA fatigue attacks

Disable SMS for privileged accounts

SIM-swap resistant

Disable SMS for RO users

38 users still rely on it

Bind sessions to device keys

Token theft protection

Re-prove passkey every hour on AFC OS intelligence pages

Continuous verification