It is very important that the roles and responsibilities are clear

• Design Network
  
  • What measures will be taken?
  • Design of the network attack surface should limit
  • This contributes to security by design organization
• Assessing the attack surface
  
  • For example go to reasoning by dreigingsegebaseerd
• Responsible for the operation of the various network components

Basic cleanliness

1. Each measure has a person being liable and a person being responsible
   1. Responsible is the person who can decide on exceptions and in general risks related to the measureResponsible: the exploitation of the measure
2. Two-factor authentication
3. Activation for all accounts that have access to the administration (admin, audit, ...)
4. If not possible, then report
5. A dedicated management interface, if outside over the VPN
6. UPDATES: keep the services up-to-date:

1. 1. Activate / enable auto-update (preferably first test and then production)
   2. Subscribe to an update list
   3. Schedule a periodical check)