All good points, I'd add one more. Make sure you have detection and response capabilities. Many attacks go from an initial point of compromise to find and atta

All good points, I'd add one more. Make sure you have detection and response capabilities. Many attacks go from an initial point of compromise to find and attack target information. If you can detect this activity early, it might be possible to reduce the severity of the breach.