Industrial Cybersecurity & OT Risk worked example
MFA Rollout Payback with mfa rollout investment of 212,500 $: a worked example
This scenario runs the mfa rollout payback calculation on the strong side: mfa rollout investment of 212,500 $, with every other input held at its documented default. Use it when evaluating MFA for vendor portals, jump hosts, engineering access, and privileged OT accounts.
The inputs for this scenario
- MFA rollout investment: 212,500 $ (raised for this scenario; the documented default is 85,000)
- Annual MFA risk reduction savings: 42,000 $ / yr (unchanged)
- Annual MFA support cost: 9,500 $ / yr (unchanged)
Working through the calculation
- Applying the documented formula (Net annual MFA savings = annual MFA risk reduction savings - annual MFA support cost) to the inputs above produces each figure below.
- At this operating point the engine returns 6.54 yr for mfa rollout payback period, the number this scenario is built around.
- At this operating point the engine returns 32,500 $ / yr for net annual mfa savings.
- At this operating point the engine returns 212,500 $ for mfa rollout investment.
- At this operating point the engine returns -50,000 $ for five-year net mfa value.
How this compares with the baseline
- Against the tool's baseline example, where mfa rollout investment sits at 85,000 $ and the headline result is 2.62 yr, this scenario comes in 150% above the baseline at 6.54 yr.
- Use it when building or defending the business case for an MFA program across IT, OT, or remote-access systems, before committing to a vendor and rollout plan. Treat this as a target state: the delta against the baseline quantifies what the improvement is worth before you commit to chasing it.
Results at a glance
- MFA rollout payback period: 6.54 yr (headline result)
- Net annual MFA savings: 32,500 $ / yr
- MFA rollout investment: 212,500 $
- Five-year net MFA value: -50,000 $
Run it with your numbers
- Every input above is editable in the live MFA Rollout Payback calculator, which recalculates instantly and can be shared with the inputs intact.
Last reviewed 2026-05-12.