THE PLAYBOOK / 10 GUIDES
Put practical defences in place
Start with one thing you can check today.
Guides are compiled from public official resources to support planning and discussions with IT teams.
IllustrationMulti-factor authentication: protect the most important accounts first
Review authentication methods, starting with administrators, email and remote access.
See CISA guidance
IllustrationLeast privilege: administrator access should not be your everyday identity
Reduce unnecessary permissions and regularly review who still needs access.
See Microsoft Learn
Original synthetic illustration created with SI agent assistanceRemote Access: Check Exposure and Update Plans
Prioritise VPNs, remote desktop and internet-facing services in your inventory.
Refer to NCSC
IllustrationEmail and phishing: combine tools with a reporting process
Reduce the chance of malicious attachments and links reaching devices.
Refer to NCSC
IllustrationEndpoint Protection: Confirm Coverage Before Handling Alerts
Once protection software is installed, someone still needs to review its status and respond.
Refer to Microsoft Security
IllustrationBackup Isolation: Keep Copies Out of the Same Incident
Include backup locations, administrative permissions and verification in the design.
See NIST guidanceIllustrationRecovery Drills: From Successful Backups to Usable Systems
Check recovery order and timing for each critical business function.
Refer to CISA / MS-ISAC
IllustrationNetwork Segmentation: Limit the Impact of One Compromised Device
Give connections between critical systems clear purposes and limits.
Refer to CISA / MS-ISAC
IllustrationSuspected Infection: Isolate First, Then Preserve Evidence
Have the incident lead coordinate the next steps to prevent further spread.
Refer to HKCERTIllustrationDecryption tools: check applicability first
Free tools may help in some cases; they are not a universal solution.
Refer to No More RansomNo guides have been added to this category yet.
CHECK YOUR READINESSNot sure where to begin?
Use six questions to organise the security controls your business needs to verify.
Start business self-assessment ↗