Teachers Kirinyaga SACCO
4,732 members · medium SACCO · KES 24,440,780 monthly volume · products: savings, loans, agri_credit, insurance, trade_finance
Compared against 2 peers of similar size (medium) and region (Central) · refreshed 1 Aug 2026 · next refresh 1 Sept 2026
Configuration
1 findingAdministrator account Achieng Kipchoge has mfaEnabled=false.
- user:usr-coop-27-0 — Achieng Kipchoge (super_admin)
Super-admin account Achieng Kipchoge has MFA disabled, leaving a privileged access path vulnerable to credential compromise. This requires urgent review given the account's elevated role.
Behaviour
0 findingsNo behaviour findings for this cooperative.
Lifecycle
0 findingsNo lifecycle findings for this cooperative.
Sequence
1 findingKilonzo Ochieng performed create_member, approve_member, and disburse_loan on member Newly Registered Member, with no separation of duties.
- user:usr-coop-27-5 — Kilonzo Ochieng
- member:mem-coop-27-scenario-0 — Newly Registered Member
- privileged_action:act-coop-27-scenario-51 — create_member
- privileged_action:act-coop-27-scenario-52 — approve_member
- privileged_action:act-coop-27-scenario-53 — disburse_loan
Kilonzo Ochieng single-handedly created, approved, and disbursed a loan to a newly registered member, bypassing separation of duties. This high-risk sequence warrants immediate review for possible unauthorized or fraudulent lending.