That’s great news! The next steps are:

• • Prioritise the greatest risks to the security of your information
  • Agree a plan to implement such, and assign a specific individual to take ownership of the implementation.
  • But well done on taking the first crucial step in improving your security posture!

• Awesome! Now ask yourself how many scenarios is contains and when it was last updated?
• Was it developed with the assistance of appropriate expertise, or put together using publicly available information but, without qualification against the clear goals and specific characteristics of your business and it’s technology environment?
• When did you last rehearse your response?

• Great work! Now, unless you’re running a 1 or 2 man shop and use few online applications MFA should be enforced by policy.  Otherwise, over time, there’s almost no chance it won’t be forgotten here and there and, the attackers only need to compromise one account.

• Excellent – It’s good protection to have.
• It should though be part of a wider information security strategy.

• Let’s be clear; we’re not talking about Anti-Virus or firewall here… Vulnerability Management seeks to ensure your devices are configured in such a way as to limit the risk of infection, or the spread of infection to other devices within the business through a practice known as ‘Hardening’.
• Such efforts can significantly reduce not only the risk of malware infection but also the ability for any such infection to spread to other devices within the business.
• Compliance alerts simply ensure your configuration remains secure.