Security Center
Authentication posture, sign-in risk, and policy compliance.
14 accounts flagged as high risk
Impossible-travel sign-ins detected in the last 24 hours. Review before the accounts are used again.
MFA enrolled
6,975
78% of all users
Failed sign-ins
2,290
−7.3% vs. last month
Blocked attempts
344
Rate limiting and geo rules
High-risk users
110
96 high · 14 critical
MFA adoption
1,967 users still need to enrol.
Password health
804 passwords fail the length or reuse rule.
Risk distribution
Flagged sign-ins in the last 30 days
Low
1,842
Medium
428
High
96
Critical
14
Failed & blocked sign-ins
Attempts that did not result in a session
Successful sign-ins (Aug)
44,370
Failure rate
5.6%
Authentication methods
Primary method per user
Recent security events
Audit log| Event | User | Location | Risk | When |
|---|---|---|---|---|
| Impossible travel | l.chen@northwind.co | Lisbon → Seoul | Critical | 14 min ago |
| Brute-force blocked | admin@northwind.co | Unknown (Tor) | Critical | 51 min ago |
| New device sign-in | rafael.antunes@northwind.co | São Paulo, BR | High | 2 hours ago |
| MFA reset requested | sofia.oliveira@northwind.co | Porto, PT | Medium | 3 hours ago |
| API key rotated | svc-billing@northwind.co | Datacentre (eu-west-1) | Low | 5 hours ago |
| Password policy failure | d.kovalenko@northwind.co | Warsaw, PL | Medium | Yesterday |
Policy checklist
Workspace security baseline
MFA required for admins
Enforced since Mar 2026
SSO enforced for @northwind.co
SAML via Okta
Session timeout at 12 hours
30 minutes for privileged roles
MFA required for all members
Rolling out — 78% enrolled
IP allowlist for admin actions
Not configured
Quarterly access recertification
6 admins overdue