Google Workspace MFA Disabled

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•1•0•59

This rule identifies when multi-factor authentication (MFA) is disabled for a Google Workspace organization. This change can weaken the organization's security posture by removing an important layer of defense against unauthorized access. Security teams should monitor for such changes to prevent potential account compromise.