R6.1 · Free remedy

AI tools without MFA or with shared logins

multi-factor authentication is the single control cyber insurers ask about most. An AI tool connected to your calendar, phone, and payments is worth protecting like a bank login.

Why underwriters ask about it

multi-factor authentication is the single control cyber insurers ask about most. An AI tool connected to your calendar, phone, and payments is worth protecting like a bank login.

How to fix it

  1. Turn on multi-factor authentication for every AI tool and every account it connects to.
  2. End shared logins: one person, one account (agents get their own — R2.3).
  3. Move passwords into a password manager.

Evidence to keep

a line in the inventory per tool: "MFA on, individual accounts."