PRACTICAL WORKBOOK
Multi-factor authentication: protect the most important accounts first
Review authentication methods, starting with administrators, email and remote access.
01 / Define the scope
02 / Check and Record Evidence
Confirm the scope first, then expand each item to check it. For 'Completed', enter an owner and evidence; for 'Not applicable', enter a reason. Progress reflects record status only, not a security score.
Data is processed only on this page and is not uploaded or saved automatically. Before leaving, download the HTML and confirm it has been saved; open that file later to continue. Do not enter passwords, verification codes or complete sensitive configurations.
Expand one item to focus on it, or view all items at once. Printing includes every item.
List administrator, email, remote access and backup administration accounts
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.
Prioritise phishing-resistant authentication; check service support and recovery processes
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.
Regularly Check Authentication Failures and Unusual Sign-In Alerts
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.