After years building security systems, I can say the majority of enterprise breaches I investigated were preventable by three decisions that cost almost nothing.
One: enforce MFA everywhere. No exceptions. Credential theft is the most common breach vector. MFA eliminates its primary consequence.
Two: network micro-segmentation. A compromised workstation should not be able to reach your finance database by default.
Three: log everything, alert on anomalies. You cannot defend what you cannot see.
Zero-Trust is not a product. It is a posture. Start with these three decisions today.
— Dick Bassey | DevDick | 2023