Security
- User type: Organization user
- Role: Full Access on Security Management
As an organization admin, or a user with Full Access on Security Management role object, you can manage security settings for your organization by navigating to My Organization > Security

Multi-Factor Authentication
- When enabled, all users within the organization must set up MFA the next time they log in to the My OPSWAT Portal.
- When disabled, the MFA requirement is lifted for all users, but users who have already set up MFA must manually disable it from their accounts.
For detailed instructions on how users can set up or disable MFA, refer to this document: Set Up MFA
Disabling the organization-wide MFA setting does not automatically turn off MFA for individual user accounts. Users must go to My Information > Security to disable MFA if they no longer wish to use it.
Data Retention
By default, Event History is stored for 30 days for new organizations. As a user with permission, you can adjust this retention period to any value between 1 and 365 days.
When an event is recorded, its expiration is calculated as: Event Timestamp + Retention Period (in days)
Changes to the retention value apply only to events logged after the setting is updated. Existing event records will expire based on the retention period active at the time they were recorded.