Is Multi-Factor Authentication (MFA) enabled for all user and administrator accounts?

MFA blocks over 99.9% of account compromise attacks by requiring a second verification step.