Security, backup, the network and monitoring are not separate problems. They are parts of the same system.
We protect
We reduce the attack surface and control access to infrastructure and data through endpoint protection, firewalls, network segmentation, multi-factor authentication and vulnerability management.
We apply least privilege, and we start from the premise that any protection can, at some point, be bypassed.
We monitor
We watch both how the infrastructure is running and the events that matter for security.
Performance problems, unavailable services, access attempts, vulnerabilities and unusual behaviour need to be spotted as early as possible.
We would rather know about a problem before users discover they can no longer work.
We limit the impact
An incident on one computer should not compromise the whole company.
We segment the infrastructure, limit privileges and, where it is justified, remove single points of failure.
A local problem should, as far as possible, stay a local problem.
We protect the data
We build backup strategies in which the important copies are independent of the systems they protect.
We do not stop at checking that a backup job shows as “successful”.
We check whether the data can actually be recovered.
We prepare recovery
We assume that, sooner or later, a serious incident can happen.
We document the infrastructure and prepare what is needed so that important systems can be restored in a reasonable time.