Maturity monitoring

Formalise and communicate the rights and responsibilities of administrators

Train administrators to the state of the art in information system security

Utiliser un poste d’administration avec accès distant contrôlé au SI bureautique

Installer un filtre de confidentialité sur les postes d’administration nomades et sécuriser leurs communications

Enable Self-Service Password Reset (SSPR) for all users

Configure password expiration policy to never expire (with mandatory MFA)

Enable anti-tampering protection (disabling prohibited)

Monitor and block malicious PowerShell

Enable basic exfiltration prevention (process/network)

Implement automated response actions (kill process/quarantine)

Implement an EDR incident runbook