[Corestack] Configure MFA for resources in Azure

The platform identifies resources in Azure without Multi-Factor Authentication (MFA) enabled and recommends configuring MFA for enhanced security. Failing to implement MFA leaves resources vulnerable to unauthorized access through compromised credentials, potentially leading to data breaches and security incidents.

Recommendation Impact Across KPIs

KPI	Impact	Calculated?
Reliability:	No direct impact on system reliability	❌
Security Compliance:	PRIMARY REC - Significantly enhances security posture by adding an additional layer of authentication	✅
Economic:	No direct economic impact calculated	❌
User Experience:	No direct user experience impact calculated	❌
Environment:	No environmental impact calculated	❌

Score Calculation

1. Data Ingestion

Azure Resource Names
Current MFA Status
User Access Levels
Resource Types

2. Data Enrichment

Mapping to Azure Security Best Practices
MFA Configuration Requirements
User Role Classifications

3. Health Score

Calculate the Security Compliance score based on percentage of resources with MFA enabled
Weighted scoring based on resource criticality and access levels

Example Graph

Pie chart showing the distribution of Azure resources with and without MFA enabled, providing a clear visual representation of the current security posture regarding MFA implementation.

Business Opportunities

Product Sales Opportunity

As a provider this recommendation provides you an opportunity to sell MFA tools and licenses for ongoing security management. The platform will identify specific resources requiring MFA implementation as part of the recommendation.

Professional Services Opportunity

The recommendation provides an opportunity for professional services to configure and implement MFA across Azure resources. This includes policy setup, user training, and ongoing security management services.

Remediation Guidance

To resolve the recommendation the following steps are recommended:

Develop an MFA Configuration Plan
Identify Resources and Roles
Assess User Groups

Set MFA Policies

Communicate with Stakeholders

Notify Users
Set Expectations

Provide Support

Execute the MFA Configuration

Enable Azure MFA
Set Up MFA for Admins
Configure MFA Settings
Configure Trusted Locations
Select MFA Method

Test MFA Setup

Post-Configuration Monitoring & Optimization

Monitor MFA Usage
Track Compliance

Address Issues

Ongoing Maintenance

Regular Audits
Adjust Policies
Educate Users

Supporting Information

Supported Data Sources

Azure Advisor
CoreStack

Recommendation Categorisation

Security
Compliance
Access Management

Supported Instances

Azure Resources
Azure Active Directory
Azure Virtual Machines
Azure SQL Database
Azure Storage

Planned Instances

Additional Azure Services
Hybrid Cloud Environments
Third-party Integration Points