Ensure the organization requires members to use Multi-Factor Authentication (MFA)

By default, every user authenticates within the system by password only. If a user's password is compromised, the user account and every repository to which they have access are in danger of data loss, malicious code commits, and data theft. It is recommended that each user has Multi-Factor Authentication enabled. MFA adds a layer of protection to ensure the account remains secure even if the user's password is compromised.