Reduce the common entry points
Patch internet-facing systems, protect remote access, use MFA, filter email and remove unsupported software and unnecessary exposed services.
Limit how far an attacker can move
Use separate administrator accounts, least privilege, network segmentation and controlled access to servers, backups and management tools.
Detect suspicious behaviour early
EDR, central logging and monitored alerts can identify ransomware-like changes, unusual scripts or credential activity while there is still time to isolate systems.
Keep recoverable backups
Maintain isolated or immutable copies, protect backup administration and test restoration. Recovery priorities and expected timeframes should be agreed before an incident.
Have an incident contact plan
Know who can authorise isolation, who contacts cyber insurance or legal advisers and how the business communicates when email or normal systems are unavailable.
Did this guide help?
If an Avant IT article helped you solve a problem or better understand your technology, you can make an optional $5 contribution towards creating more practical guides. Help keep us awake and typing by shouting the team a coffee! Every guide is created in-house by our passionate team, often in our own time, to share our knowledge and give back to the community.
Your support is completely optional but always appreciated.Help us build a free guided troubleshooting centre for common email, Wi-Fi, internet, computer and browser problems.
Support the free tools