Shut these doors, in this order

Each door is one change, ordered by the exposure it removes and the certification requirements it completes per hour of work. Fixes interact, so the order is recalculated after every one.

Now · 5.5 hours

−3.5 exposure1 hourIDN-005
Accounts belonging to leavers or unused services are rarely watched, so a compromise goes unnoticed. Cyber Essentials requires removing accounts no longer needed.
1. Review the listed accounts with their line managers.
2. Block sign-in immediately for anyone who has left; delete after your retention period (convert mailboxes to shared if needed).
3. Add an account-removal step to your leavers process and schedule a quarterly access review.
CompletesCE-UAC-REVIEWA.5.18

Next 30 days · 17 hours

Next 90 days · 7 hours

Shut these doors, in this order

Each door is one change, ordered by the exposure it removes and the certification requirements it completes per hour of work. Fixes interact, so the order is recalculated after every one.

Now · 5.5 hours

−3.5 exposure1 hourIDN-005
Accounts belonging to leavers or unused services are rarely watched, so a compromise goes unnoticed. Cyber Essentials requires removing accounts no longer needed.
1. Review the listed accounts with their line managers.
2. Block sign-in immediately for anyone who has left; delete after your retention period (convert mailboxes to shared if needed).
3. Add an account-removal step to your leavers process and schedule a quarterly access review.
CompletesCE-UAC-REVIEWA.5.18