The risks associated with the use of password-only authentication are not new. In 1995, it was reported that approximately 80 percent of the security incidents received by CERT were related to poorly chosen passwords. Fifteen years later, 44 percent of organizations are still using just a password to secure remote access to their intranet.

With today's threat landscape and the increased value placed on the information created and stored, systems that rely on static passwords for security are left vulnerable and at risk of being breached. In this paper, we will examine the need for two-factor authentication and explore the return on investment that can be realized in order to help organizations make an informed decision when contemplating their strategic move toward stronger security.