What does a cyber insurance form mean by MFA on privileged accounts?

What exactly does the form ask?

These are the forms' own words, with the form and page each comes from.

All local access to privileged user accounts?

All remote access to privileged user accounts?

Multi-factor authentication for administrative or privileged access

Please provide details on how you protect privileged user accounts

What does it mean for a small firm?

A privileged account is an administrator: the account that manages your mail service, your computers, your firewall or your accounting system. Outside support companies often hold one.

How do I answer it truthfully?

List every administrator account, including the ones held by outside support companies and the built in admin account of each system. Answer Yes only if each one asks for a second step, both at the office and from outside.

Can an outside reading check this?

An outside reading cannot see who your administrators are or how they sign in. Nothing inside your network, your devices or your accounts can be seen from outside, so this cannot be checked that way. Only your own settings and records can show it.

Which questions sit next to this one?

• MFA on remote access
• Local admin rights
• Account lockout