A lot of people are mentioning software security vulnerability scanning, patching bugs quickly, etc - all extremely important but these measures are better exec

A lot of people are mentioning software security vulnerability scanning, patching bugs quickly, etc - all extremely important but these measures are better executed continuously and hard to do quickly. The quickest way to block cyberattacks with measurable security benefit is probably through network controls. ACLs, segmentation, firewalls, IDS/IPS, etc. You can deploy these and block a lot of attacks right off the bat. Looking into AD security, GPO, anything that can deploy configuration to your entire environment is common to exploit and important to lock down. Those are the kinds of measures that have really measurable impact and help prevent the kind of catastrophe that state-sanctioned operations create.