5 areas that commonly require attention include

Managed EDR (endpoint detection and response)/security: In every instance where RSM has provided remediation services, the client either lacked EDR capabilities, implemented an insufficient EDR solution (often due to cost savings), or maintained an unmanaged EDR deployment with inadequate configuration and monitoring. Organizations must continuously assess their overall security infrastructure to ensure it meets today’s demands for 24/7 protection. Given that most organizations lack a dedicated cybersecurity team, routinely evaluating and updating their security tools, processes and configurations are crucial to maintaining comprehensive coverage and resilience. In most cases, outsourcing security proves to be more advantageous for the organization.

Zero trust: Companies often assume that the default security provided by the Microsoft ecosystem is sufficient protection for their tenant and data. However, this is not always the case, and many organizations discover their security is less comprehensive than anticipated. Adopting a zero trust model is an effective access control strategy that enhances protection against modern threats by applying security measures consistently across all access points and verifying every request, regardless of its origin.

Backup architecture: During recovery, it is rare for operations to be fully restored using an existing backup infrastructure, and when it is possible, the process can be extremely challenging and time-consuming. Many organizations mistakenly believe that simply having any backup solution is adequate, which is far from the truth. In reality, improper implementations and misconfigurations of backup environments are all too common. Like security, backup strategies are continuously evolving and must be properly configured and implemented to meet current requirements, as they are crucial to effective disaster recovery and business continuity processes.

Tiered administration: Tiered administration is a novel concept for many organizations, which often default to convenience over security due to a lack of awareness. As a result, administrators frequently use a single account for all administrative access across the infrastructure. A properly implemented tiered administration model introduces crucial segmentation within the active directory environment, differentiating administrative and resource access levels. This approach not only enhances security but also provides inherent containment, limiting the impact of a compromised account.

Network hardening: Many network environments suffer from inadequate security, identity and application controls, and poor segmentation. These issues often arise from outdated or inadequate network technologies that lack essential features. As technology advances rapidly, it is crucial to employ modern solutions that meet today’s security needs and effectively counteract opportunistic bad actors, who increasingly use sophisticated tools and techniques.