There are several best practices security teams can follow to strengthen their organization’s defenses through multi-factor authentication.
https://www.securitymagazine.com/articles/98588-multi-factor-authentication-isnt-always-enough-to-stop-cyber-threats