Kudos to all employees, both in ITS as well as partner agencies, that are working hard to roll out multi-factor authentication (MFA) as an enhanced security feature for users accessing state systems.
Over the last six months, ITS has actively investigated and monitored six major cybersecurity incidents affecting state agencies as well as over 43 cybersecurity incidents that would have been prevented by use of MFA. These incidents directly affected more than 300 employees with impacts including:
- Employees being locked out of performing business duties for multiple days
- Exposure of sensitive information including social security numbers, address and date of birth
- Loss of paychecks
ITS has noticed a remarkable drop in compromised user accounts among state agencies that have MFA enabled versus agencies that do not.