Building a practical security baseline for a training provider

The challenge

There is no clear view of which risks matter most or where to start.

Some accounts are shared and multi factor authentication is not in use.

Our approach

• We run an assessment against the CIS Controls and rank findings by risk.
• Multi factor authentication, patching routines and backup testing come first.
• Ongoing monitoring and quarterly reviews run through managed services.