Multi factor authentication. One of the highest impact controls available to reduce likelihood of breach, but how can you ensure MFA is in use for all corporate apps where appropriate without knowing what apps are in use, by whom, and for what purpose?
