Cybersecurity Fundamentals

Protect identities and access

Use strong authentication, least-privilege access and prompt removal of unused accounts. Privileged access should be limited and reviewed regularly.

Reduce preventable exposure

Keep systems updated, inventory assets and configure logging. Staff should know how to report suspicious messages or unexpected access requests.

Prepare to respond

An incident response plan should define escalation, evidence preservation, communications and recovery responsibilities. Test the plan rather than relying on documentation alone.

Practical review checklist

• Define the business objective and the owner accountable for decisions.
• Document the current position and relevant dependencies.
• Assess security, operational and legal implications before making changes.
• Set measurable outcomes and a date to review results.
• Maintain records of approvals, exceptions and lessons learned.

These are general considerations; the appropriate approach depends on the organization, sector and applicable requirements.

Related resources