Kitui · Eastern

Boda Boda Kitui SACCO

1,026 members · small SACCO · KES 4,122,468 monthly volume · products: savings, loans, dividends, insurance, agri_credit

Risk score
64
50th percentile

Compared against 0 peers of similar size (small) and region (Eastern) · refreshed 1 Aug 2026 · next refresh 1 Sept 2026

Configuration

2 findings
Auma Mwikali (admin) does not have MFA enabled
medium severityOpen
Priority
85
Rule fired · configuration.missing_mfa

Administrator account Auma Mwikali has mfaEnabled=false.

  • user:usr-coop-19-0 — Auma Mwikali (super_admin)
AI assessment

A super_admin account (Auma Mwikali) has no MFA enabled, leaving privileged access to the cooperative's systems protected by only a single factor. Given the small SACCO's member base, this configuration should be prioritized for review to prevent unauthorized administrative access.

Wanjiru Nekesa holds both maker and checker rights
high severityOpen
Priority
75
Rule fired · configuration.maker_checker_overlap

Account Wanjiru Nekesa (loan_officer) has hasMakerRights=true and hasCheckerRights=true simultaneously, so the same account can both initiate and approve an action.

  • user:usr-coop-19-2 — Wanjiru Nekesa (loan_officer)
AI assessment

Wanjiru Nekesa (loan_officer) has both maker and checker rights, allowing the same account to initiate and approve actions, which violates segregation of duties and increases fraud or error risk.

Behaviour

0 findings

No behaviour findings for this cooperative.

Lifecycle

0 findings

No lifecycle findings for this cooperative.

Sequence

0 findings

No sequence findings for this cooperative.