For the 94 percent of organizations today that use the cloud, the ability to set and forget company-wide authentication policies can be a reassuring defense against data theft. And they’re right to feel secure: according to Google, simply implementing two-factor authentication can protect individuals against 96 percent of bulk phishing attacks. But if an organization’s policies are too strict—requiring users to use two-factor authentication every time they access their email, for instance—they can quickly bring down employee productivity.
While data security is a strong priority, it shouldn’t be the only factor administrators consider when setting authentication policies. Some authentication settings are stricter than others, and not everything needs to be behind 18 dead-bolted doors. If you set just one policy for your whole organization, you could be forced to choose between slowing down your teams or leaving sensitive data unguarded. The solution? For large organizations, setting up multiple authentication policies allows you to keep data secure without putting hurdles in teams’ way.