Enforce Multi-Factor Authentication (MFA)

Info

ID: MS-M7012
MITRE mitigation: M1032

Require multi-factor authentication for all user and administrative accounts accessing cloud web applications and management interfaces. MFA adds an additional layer of security beyond passwords, significantly reducing the risk of unauthorized access from compromised credentials.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7008	Valid cloud accounts	Require MFA for all user and administrative accounts to prevent unauthorized access from stolen credentials.
MS-TA7005	Exposed/misconfigured admin interfaces	Require MFA for access to all administrative and management interfaces.
MS-TA7010	Cloud native terminal	Require MFA for all access to administrative shell and console features.
MS-TA7018	Brute force	Require MFA to prevent credential-based access even if passwords are guessed.