BuildingFloorsPlanEvidenceFrameworks
Harbour & Finch Accountants Ltd

Shut these doors, in this order

Each door is one change, ordered by the exposure it removes and the certification requirements it completes per hour of work. Fixes interact, so the order is recalculated after every one.

Now · 5.5 hours

Next 30 days · 17 hours

  5. −0.4 exposure2 hoursIDN-008

    An admin who reads email and browses the web with the same account turns any successful phishing email into a full tenant compromise. Cyber Essentials requires separate accounts for administration.

    1. Create a separate, unlicensed admin account for each administrator (e.g. adm-jane@...).
    2. Assign the admin role to the new account and remove it from the daily-use account.
    3. Require phishing-resistant MFA for admin roles via Conditional Access authentication strengths.
    CompletesCE-UAC-ADMIN

Next 90 days · 7 hours