Insights

The previous administrator has left and nobody knows the passwords. This is the order we work in, and why access comes before everything else.

A green tick in a backup console is a claim, not evidence. Testing restores quarterly costs an afternoon and prevents the worst week of your year.

Patching, access control and backups before anything visible. It is the least impressive month of the engagement and it prevents most of what follows.