The steps mentioned above may look simple, but this is based on an assumption that the organization has a baseline of Information and Cyber Security Practice in place. To name a few of the baseline cyber security hygiene that the industry expects are: –

1. Inventory of authorized and unauthorized devices on organization’s network
2. Inventory of authorized and unauthorized software on organization’s network
3. Virus and Malware Protection
4. Data Leak Prevention and Protection
5. IT Security Process for the organization based on their control applicability.
6. Periodic Vulnerability Assessment of their IT environment and remediation process.
7. Established Breach and Incident Response process
8. Log monitor and Analysis
9. Third Party / Vendor security management
10. Training for stakeholders.