Multi-Factor Authentication Coverage Audit

Audit multi-factor authentication coverage by system and user, calculate gaps and rank which priority systems to fix first.

Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made

The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.

Check multi-factor coverage. List of systems and users with whether multi-factor authentication is on, off or optional, and the method used: [MFA_STATUS]. Priority systems: [PRIORITY_SYSTEMS].

Calculate coverage per system as users with it enabled divided by total users, and overall. Rank gaps by system sensitivity: email, finance, admin and remote access first. Note weaker methods such as text messages and stronger ones such as authenticator apps or hardware keys.

Return a table, a rollout plan in waves with dates, help-desk preparation and a recovery process for lost devices.

Add a worked coverage calculation: email 190 of 200 users enabled, 95 percent; finance system 18 of 20, 90 percent; remote access 60 of 80, 75 percent; admin accounts 10 of 12, 83 percent. Overall for these four = (190 + 18 + 60 + 10) divided by (200 + 20 + 80 + 12) = 278 divided by 312 = 89 percent. Priority: admin accounts and remote access first. Add a plan for those who cannot use a phone: hardware keys, with funding and training. Provide a message to staff under 80 words explaining why and how.

Add a worked example of a plan for the 75 percent remote access group: 20 users remain; enrol 10 per week over two weeks with a help session each Friday; track weekly completion as enrolled divided by total.

Add a section on exceptions and resilience: shared mailboxes and service accounts need compensating controls, so list them with owners; plan for lost phones with a verified recovery process and backup methods; and test the process with a volunteer. Record how many accounts remain without protection each month and report the trend to leadership, aiming for zero exceptions without an approved reason and review date.

Close with a monthly target for the coverage percentage and the date by which every administrator account is protected.

Fill in before use

Optional: type your details and the prompt above updates. Nothing is saved or sent.

Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.

Invented coverage.
Email: 190 of 200 users = 95 percent. Finance system: 18 of 20 = 90 percent. Remote access: 60 of 80 = 75 percent. Admin accounts: 10 of 12 = 83 percent.
Overall for these four = (190 + 18 + 60 + 10) / (200 + 20 + 80 + 12) = 278 / 312 = 89 percent.
Priority: admin accounts and remote access first.
Remote access plan: 20 users remain; 10 per week over two weeks with a Friday help session.
Weaker methods: text messages for 35 users; move them to an authenticator app next quarter.

• audit