Security teams are therefore tasked with reducing this human targeted risk, however, employees are often granted excessive trust within healthcare networks, which means that threat actors don't need to find a backdoor; they simply exploit the front door provided by people. This is where multi-factor authentication (MFA) is crucial. Healthcare organisations must implement robust MFA policies to ensure that access is only granted to those who have cleared a thorough verification process. This way, if threat actors manage to obtain an employee's credentials, MFA acts as a safety net, preventing unauthorised access at the network's entry point and stopping the attack in its tracks.