Who will be required to use Multi-Factor Authentication (MFA) in NCEdCloud?

Currently, employees with any of the NCEdCloud IAM Service privileged roles: LEA Administrator, LEA Data Auditor, LEA Help Desk, LEA Student Help Desk, School Help Desk, or School Student Help Desk, are required to use MFA and enter a One-Time Password (OTP) with each login to the NCEdCloud RapidIdentity portal.  PSU leadership can also decide to require ALL staff or a subset of employees (e.g. HR, Finance, etc.) to use MFA, particularly if doing so will reduce the risk of cybersecurity attacks or the cost of cybersecurity insurance for the PSU.