Vanderbilt Enterprise Cybersecurity accelerating deployment of multi-factor authentication in two areas

 

Historically, the health care industry has been a top 10 target for identity attacks. In 2020, with the onset of COVID-19, overall attempts increased. In July of 2021 alone, there were millions of intrusion-attempts on VUMC’s network and perimeter, including phishing and malware, and even ransomware attacks. The vast majority were thwarted by security measures already in place by Vanderbilt Enterprise Cybersecurity. However, to further strengthen authentication processes and reduce risk, VUMC leadership and the ExpeditionTech initiative are fast-tracking the deployment of multi-factor authentication in two areas.

1)  MobilePass+ for VUMC’s Virtual Desktop Infrastructure (VDI)

Starting Monday, Aug. 30, if you work on VUMC’s Virtual Desktop Infrastructure (VDI), you will see a SafeNet MFA prompt when logging in from outside the VUMC network.  SafeNet is the same MFA you currently use to access Box, our VPN, and certain areas of Access VUMC and C2HR.

This expansion of MobilePASS+ MFA to the VDI environment ensures that all data entrusted to VUMC is protected from outside threats.

2) Microsoft MFA for Microsoft 365 services

Recent bring-your-own-device (BYOD) efforts through ExpeditionTech have created the opportunity to move our workforce to Microsoft MFA for Microsoft 365 services (like OneDrive for Business, Teams, and Outlook Email). The majority of our workforce members have already installed Microsoft Authenticator on their personal device enabling a quick enrollment experience. This move strengthens our ability to ward off identity attacks and takes the next step on our security roadmap.

Enrollment will begin mid-September and will follow a staggered schedule with impacted individuals receiving a series of four communications beginning two weeks prior to their scheduled migration.

Once enrolled, users will enjoy improved protections for their VUMC ID identity and Microsoft 365 services as well as fewer sign-in prompts and new self-service capabilities.

Assistance and Support