Please elaborate on what levels of security is built into your login system – i.e. do you provide 2 factor authentication?

Internally, yes 2FA is enabled for relevant staff/applications. Externally, it depends on your own configuration at your STS.