Multi-Factor Authentication (MFA) is a core tenet of cybersecurity and recent NYDFS enforcement actions have highlighted such deficiencies. NYDFS issued guidance on compliance with Part 500 regarding MFA, an important read, which may be found here:  https://www.dfs.ny.gov/industry_guidance/industry_letters/il20211207_mfa_guidance