Phase 5 — Cybersecurity
Security fundamentals
MFA (Multi-Factor Authentication), phishing, least privilege, endpoint protection, 3-2-1 backups.
What you will be able to do
- ▸Apply a realistic security baseline to a 5–50 person business
- ▸Evaluate a backup strategy against a ransomware scenario
- ▸Handle a phishing click and a compromised account calmly
Lessons
A security baseline a small business will actually adopt
Enterprise frameworks overwhelm a 12-person studio. Ten controls, done properly, remove most of the real risk.
Phishing, account compromise and the first hour
Someone will click. What matters is what happens in the sixty minutes afterwards.
3-2-1 and the ransomware question
If every computer in this company were encrypted tomorrow, what exactly would you restore from?
Area check
Pass at 70% to bank the area.
1. A user's OneDrive files were encrypted by ransomware and synced to the cloud. Why is sync not a backup?
2. What does the '1' in 3-2-1 refer to?
3. An account is compromised despite MFA. What most likely happened?
4. Which single change most reduces malware installing on user machines?
5. RTO (Recovery Time Objective) describes: