Mombasa · Coast

Traders Mombasa SACCO

545 members · small SACCO · KES 2,253,575 monthly volume · products: savings, loans, mobile_banking, dividends

Risk score
67
33rd percentile

Compared against 3 peers of similar size (small) and region (Coast) · refreshed 1 Aug 2026 · next refresh 1 Sept 2026

Jua Kali Artisans Kwale SACCO · 85Tea Growers Kilifi SACCO · 75Boda Boda Kwale SACCO · 0

Configuration

3 findings
Admin Account 3 (admin) does not have MFA enabled
medium severityOpen
Priority
88
Rule fired · configuration.missing_mfa

Administrator account Admin Account 3 has mfaEnabled=false.

  • user:usr-coop-18-extra-admin-2 — Admin Account 3 (admin)
AI assessment

Admin Account 3 is a privileged administrator account with multi-factor authentication disabled, exposing the cooperative's systems to unauthorized access if credentials are compromised. This should be reviewed promptly.

Admin Account 4 (admin) does not have MFA enabled
medium severityOpen
Priority
85
Rule fired · configuration.missing_mfa

Administrator account Admin Account 4 has mfaEnabled=false.

  • user:usr-coop-18-extra-admin-3 — Admin Account 4 (admin)
AI assessment

Administrator account Admin Account 4 lacks MFA, leaving a privileged credential with only password-based protection. For a small SACCO, this elevates the risk of unauthorized access to member financial data, so prioritize timely remediation.

Administrator count exceeds expectations for this cooperative's size
medium severityOpen
Priority
78
Rule fired · configuration.admin_ratio_breach

7 active administrators recorded against an expected baseline of ~2 for a small cooperative with 545 members.

  • user:usr-coop-18-0 — Mwangi Ochieng (super_admin)
  • user:usr-coop-18-1 — Mutua Omondi (admin)
  • user:usr-coop-18-extra-admin-0 — Admin Account 1 (admin)
  • user:usr-coop-18-extra-admin-1 — Admin Account 2 (admin)
  • user:usr-coop-18-extra-admin-2 — Admin Account 3 (admin)
  • user:usr-coop-18-extra-admin-3 — Admin Account 4 (admin)
  • user:usr-coop-18-extra-admin-4 — Admin Account 5 (admin)
AI assessment

This small SACCO has 7 active administrators versus an expected baseline of 2, including a super_admin and five generic 'Admin Account' entries, indicating excessive privileged access that warrants urgent review. The extra admin accounts in particular suggest potential unauthorized or poorly controlled administrative access.

Behaviour

0 findings

No behaviour findings for this cooperative.

Lifecycle

0 findings

No lifecycle findings for this cooperative.

Sequence

0 findings

No sequence findings for this cooperative.