This guide explains the ten essential Microsoft 365 security controls we recommend for charities to reduce cyber risk, improve governance and strengthen long-term resilience
Bunker Snapshot - MFA at a glance
Estimated reading time 🕒 45 seconds
Everything you need to know about this security control in under 60 seconds.
Business impact
🔴 Security improvement
🔴 Risk reduction
🟢 Operational impact
Very High
Very High
Low
Related Controls
Next Steps
Review your Microsoft 365 MFA configuration and ensure all privileged accounts are protected.
What it does
Adds an extra layer of security by requiring users to verify their identity before accessing Microsoft 365.
Why it matters
Blocks 99.9% of automated attacks and significantly reduces the risk of account compromise.
Time to implement
⏱ 1–2 hours
Who it affects
All users with access to Microsoft 365 accounts, including admins and trustees.
Implementation difficulty
LOW
Licensing
Included in Microsoft 365. No additional licence required.