Never trusting and always verifying

Consider the ongoing threats to the network

Authenticate users by least privilege access

Establish end-to-end analytics

Outline the defensive surface

Illustrate the transactional flows

Establish a network with zero trust

Implement the Zero Trust policy

Follow up on the network and maintain it

Unclear understanding of what to automate

Not mapping out the automation plan

Being overly dependent on automation
to solve all problems

Ignoring its impact on employees

Abandoning track of the post-production

Policies and Procedures

Access Management

Networking

Back-Up and Data Recovery

Security Patches and Updates

Data Encryption