> AND MFA on various transactions This is actually reasonable. there are some transactions that require re-authentication to make sure you are the person behin

> AND MFA on various transactions This is actually reasonable. there are some transactions that require re-authentication to make sure you are the person behind the screen. This is in swift contrast with question from finance dept such as "how long of a screen timeout is secure?". To what I respond "about 10 seconds - the time you need to walk to the door". This is "not acceptable" - to which the answer is re-authentication but his requires them to actually think about what is important and recode the app.