Remediation Library

Deploy MFA across all accounts, prioritizing privileged, remote, and externally-facing accounts to reduce credential-based attacks.

Build and maintain an authoritative inventory of all hardware and software assets to enable effective risk management.

Use built-in update tools first, then prioritize exposed and actively exploited weaknesses using business context.

For Microsoft 365 teams: retire older password-only sign-in paths without unexpectedly breaking scanners, applications, or administrator access.

Give people and applications only the administrative permissions they need, with a recoverable way to remove unnecessary access.

For Exchange Online teams: prevent unapproved automatic forwarding while preserving explicitly approved business workflows.

Protect your sending domain from direct spoofing through a staged rollout that checks legitimate senders before enforcing rejection.

Use the protections included with your email service, assign quarantine and reporting owners, and test without live malware or credential collection.

Share with intended recipients, remove unnecessary public access, and check permissions from both authorized and unauthorized accounts.

Protect critical data against ransomware and disasters with a tested backup and recovery program.

Start with existing identity, email, endpoint, and backup alerts. A paid SIEM is not a prerequisite.

Prepare your organization to effectively detect, contain, eradicate, and recover from security incidents.

Protect sensitive data from unauthorized access through comprehensive encryption controls.

Start with a short team conversation and free resources. A training platform is optional.