Tools are the basics of any security program. Having the right tools to monitor systems, data and transactions and acting on anything suspicious is required today. Additionally, user actions are the #1 reason business’ have a breach. Security training and awareness build a security culture that mitigates negative user actions.

Having good “bones” and processes for technology is critical. Systems need to be under warranty and the proper security patches maintained. Backups should be managed to a level to support recovering business to appropriate timeframes. Additionally, restoration of backups to support the environment must be regularly tested.

Controls on accessing systems/software is a requirement across the board. Managing onboarding and offboarding effectively ensures integrity. Identify verification through a Multi-factor Authentication (MRA) process on applications, infrastructure and end points provides you with an additional level of protection to keep the bad guys out.