Identity
- Enable MFA for users, especially administrators.
- Minimize standing privileged roles.
- Review stale or unnecessary accounts.
- Use strong account recovery practices.
Administrative access
- Use dedicated admin accounts where practical.
- Limit Global Administrator assignments.
- Review who can change security settings.
- Protect administrative devices and sessions.
Email security
- Review anti-phishing and impersonation protections.
- Use SPF, DKIM, and DMARC appropriately.
- Train users to verify sensitive requests through a second channel.
- Monitor suspicious mailbox rules or forwarding.
Want a structured review of your environment?
The Oncitetek Technology & Cybersecurity Assessment can turn these questions into prioritized findings and recommendations.
Request an Assessment