Key actions in the bulletin
Identify critical digital assets and assess threats, vulnerabilities and potential consequences. Choose proportionate responses, including technical controls and any appropriate insurance.
Monitor systems, maintain antivirus and software updates, and keep regular offline backups. Train employees to identify phishing, report suspicious messages, use strong authentication and apply updates. A workplace security culture is as important as technical tools.