The Bunker Microsoft 365 Security Framework
This guide explains one of the ten essential Microsoft 365 security controls we recommend for charities to reduce cyber risk, improve governance and strengthen long-term resilience.
Multi-Factor Authentication (MFA)
Protect your Microsoft 365 accounts by requiring every user to verify their identity using a second factor. MFA is one of the most effective ways to prevent unauthorised access, even if passwords are compromised.
Overview
Multi-Factor Authentication (MFA) adds an extra layer of security by requiring users to verify their identity using a second factor, such as the Microsoft Authenticator app.
Why it matters
Multi-Factor Authentication (MFA) adds an extra layer of security by requiring users to verify their identity using a second factor, such as the Microsoft Authenticator app.
Common mistakes
Multi-Factor Authentication (MFA) adds an extra layer of security by requiring users to verify their identity using a second factor, such as the Microsoft Authenticator app.
Bunker's Recommended Approach
Multi-Factor Authentication (MFA) adds an extra layer of security by requiring users to verify their identity using a second factor, such as the Microsoft Authenticator app.
How We Helped a UK Charity
During a recent Microsoft 365 security review for a UK charity with over 100 staff, we discovered that several privileged accounts were not protected with Multi-Factor Authentication. Working with the charity, we:
✔ Enabled MFA for all administrator accounts.
✔ Removed legacy authentication methods.
✔ Reviewed Conditional Access policies.
✔ Increased their Microsoft Secure Score as part of a wider security improvement programme.
Rather than simply enabling MFA, we ensured the controls aligned with the charity’s governance requirements and long-term cyber security strategy.
