Companies should use multifactor authentication as part of a layered security strategy that includes identity and access management which exceeds passwords.