Po @ TBS-Cyber

@benoitlarivee I'll take a look and add the links to the correct locations.

I am also in favour of implementing multi-factor authentication. We made it mandatory for privileged access to cloud-based services in the [Direction on the Secure Use of Commercial Cloud](https://www.canada.ca/en/treasury-board-secretariat/services/access-information-privacy/security-identity-management/direction-secure-use-commercial-cloud-services-spin.html#toc6-2-3), Section...

In general, I think we should be developing a checklist for securing GitHub.This includes enabling 2FA in general for those with accounts. If this is a key component of the...