R08 — Account Takeover
Identity is the dominant defense. MFA + behavioral detection.
What is Account Takeover?
Identity is the dominant defense. MFA + behavioral detection. CISO Game tracks this as R08 in the live risk register, severity 7 (Major), category External.
How does CISO Game model Account Takeover?
Exposure for R08 runs from 0 to 100, recomputed live as you buy, cancel, or reassign products. How the exposure model works →
Real-world parallel
Account takeover is the risk that stolen credentials get reused. Credential-stuffing attacks now run at industrial scale against every login form on the internet. Mitigation is straightforward in principle (MFA everywhere, especially phishing-resistant MFA, plus risk-based authentication) but politically messy in practice — every MFA holdout in the org becomes the credential the attacker harvests first.
How do security teams mitigate Account Takeover?
The dominant subscore levers for this risk are:
- Identity subscore — weight 50%
- Detection subscore — weight 25%
- Awareness subscore — weight 25%
Which investments mitigate Account Takeover?
Products in CISO Game that reduce exposure to R08:
- Premium XDR (full endpoint+identity)EDR
- Mobile Device Management (MDM)Endpoint Mgmt
- Zero Trust Network Access (ZTNA)Network
- Cloud Access Security Broker (CASB)Network
- Basic SSO + TOTP MFA (phishable)IAM
- Full IAM with PAMIAM
- Mid-tier CNAPPCloud Sec
- Premium CNAPP (multi-cloud)Cloud Sec
Which related risks should you also watch?
Risks with similar dominant subscores or shared category — addressing one often helps the others:
- R03 Phishing / Credential TheftExternal · severity 7
- R10 Privilege AbuseInsider · severity 7
- R12 Third-Party Access RiskInsider · severity 7
- R19 M&A Integration / Diligence FailureGovernance · severity 7
Why does Account Takeover matter to a CISO?
External adversarial risks like account takeover are the risks boards expect their CISO to talk about. They drive the strongest demand for detection + response capability and the strongest emotional response in the boardroom.
How can you test your mitigation strategy?
Click Play CISO Game free to see R08 appear live in your risk register and watch each purchase move the exposure number in real time. No signup required.