Showing 1–5 of 5 articles

Infrastructure Security Advanced 2 min Medium

Keep a list of the remote admin tools you allow

A legitimate support tool still creates an access path. Record the tool, managed systems, operators, authentication, session records, and how access is removed.

Access controlEndpoint securityRemote access
Read the visual guide
ITShield Insights Advanced 2 min Medium

How to judge a supplier without a giant spreadsheet

A supplier with little stored data can still have powerful access or support a critical workflow. Match your review to the service boundary, permissions, and consequences of disruption.

Access controlBusiness continuityGovernance
Read the visual guide
ITShield Insights Intermediate 3 min Informational

Questions to ask before you buy cyber insurance

An insurance policy needs to match your organization’s systems and likely losses. Resolve important definitions, exclusions, control requirements, and approved response arrangements before relying on cover.

Business continuityGovernanceIncident response
Read the visual guide
Security Guides Intermediate 2 min High

Who can send mail as the company

Your domain may appear in messages from staff, marketing tools, websites, and finance services. Record each sender and connect it to an owner and an intended authentication setup.

DMARCEmail securityIdentity management
Read the visual guide
Infrastructure Security Intermediate 2 min Medium

Close a vendor’s access when the contract ends

A contract ending does not automatically remove a supplier’s technical access. Use an access register to close named accounts, integrations, remote agents, and shared secrets.

Access controlOffboardingRemote access
Read the visual guide
Scroll to Top