Checklist
Work through the controls that protect accounts, devices, email, data, websites, and recovery. Start with the items marked first.
Check my businessEnable MFA, remove reused passwords, and separate administrator access.
Open resourceReduce impersonation and account takeover risk with identity and domain controls.
Open resourceKeep isolated backups and test a real restore before you need it.
Open resource