Data Breach Prevention: Controls Every Company Should Have

Start with the basics

Most breaches use ordinary weaknesses. These controls cover many of them.

• Multi-factor authentication on email, remote access and admin accounts.
• Patching of internet-facing systems on a fixed schedule.
• Least privilege: staff and systems get only the access they need.
• Encryption of sensitive data in transit and at rest.
• Backups that are tested and kept offline or immutable.
• Logging and alerts so someone notices unusual activity.
• Staff training on phishing and payment fraud.

Check that it works

Controls only help if they are in place and working. A security configuration audit and a penetration test check this from the outside.

This article is a short summary kept so the page keeps working while the full text is imported from the Securelyn content repository.