Compliance, Mapped to Your Cloud

Employ a backup solution that automatically and continuously backs up critical data and system configurations.

Require multi-factor authentication (MFA) for accessing your systems whenever possible. MFA should be required of all users, but start with privileged, administrative, and remote access users.

Enable automatic updates whenever possible. Replace unsupported operating systems, applications and hardware. Test and deploy patches quickly.

Lead development of an internal reporting structure to detect, communicate and contain attacks.

Learn how your data is protected.

Learn what is happening on your network, manage network and perimeter components, host and device components, data-at-rest and in-transit, and user behavior activities.

Domain name system protection.

Establish regular automated backups and redundancies of key systems.

Leverage protections for backups, including physical security, encryption and offline copies.

Learn who is on your network. Maintain inventories of network connections (user accounts, vendors, business partners, etc.).

Leverage multi-factor authentication for all users, starting with privileged, administrative and remote access users.

Grant access and admin permissions based on need-to-know and least privilege.

Leverage unique passwords for all user accounts.

Learn what is on your network. Maintain inventories of hardware and software assets to know what is in play and at-risk from attack.

Leverage automatic updates for all operating systems and third-party software.

Implement security configurations for all hardware and software assets.