Kirinyaga · Central

Teachers Kirinyaga SACCO

4,732 members · medium SACCO · KES 24,440,780 monthly volume · products: savings, loans, agri_credit, insurance, trade_finance

Risk score
95
100th percentile

Compared against 2 peers of similar size (medium) and region (Central) · refreshed 1 Aug 2026 · next refresh 1 Sept 2026

Configuration

1 finding
Achieng Kipchoge (admin) does not have MFA enabled
medium severityOpen
Priority
80
Rule fired · configuration.missing_mfa

Administrator account Achieng Kipchoge has mfaEnabled=false.

  • user:usr-coop-27-0 — Achieng Kipchoge (super_admin)
AI assessment

Super-admin account Achieng Kipchoge has MFA disabled, leaving a privileged access path vulnerable to credential compromise. This requires urgent review given the account's elevated role.

Behaviour

0 findings

No behaviour findings for this cooperative.

Lifecycle

0 findings

No lifecycle findings for this cooperative.

Sequence

1 finding
Kilonzo Ochieng created, approved, and disbursed to the same member
high severityEscalatedCASE-001 · Investigating
Priority
90
Rule fired · sequence.create_approve_disburse

Kilonzo Ochieng performed create_member, approve_member, and disburse_loan on member Newly Registered Member, with no separation of duties.

  • user:usr-coop-27-5 — Kilonzo Ochieng
  • member:mem-coop-27-scenario-0 — Newly Registered Member
  • privileged_action:act-coop-27-scenario-51 — create_member
  • privileged_action:act-coop-27-scenario-52 — approve_member
  • privileged_action:act-coop-27-scenario-53 — disburse_loan
AI assessment

Kilonzo Ochieng single-handedly created, approved, and disbursed a loan to a newly registered member, bypassing separation of duties. This high-risk sequence warrants immediate review for possible unauthorized or fraudulent lending.