Identity & access
- Require MFA for remote and cloud access where supported.
- Use separate administrative accounts for privileged work.
- Disable accounts promptly when access is no longer needed.
- Review privileged access periodically.
Endpoints & servers
- Keep operating systems and applications supported and patched.
- Use endpoint protection appropriate to the environment.
- Remove unnecessary software and local administrative rights where practical.
- Maintain an inventory of critical devices and servers.
Email & collaboration
- Protect email against phishing and impersonation.
- Train users to verify unusual payment, credential, and data requests.
- Review external sharing and collaboration settings.
- Have a clear process for reporting suspicious messages.
Backup & recovery
- Protect critical data and systems with backups.
- Keep recovery capability sufficiently separated from production compromise.
- Test representative recoveries.
- Know which systems must return first.
Want a structured review of your environment?
The Oncitetek Technology & Cybersecurity Assessment can turn these questions into prioritized findings and recommendations.
Request an Assessment