Address the CIS Critical Security Controls

The Center for Internet Security (CIS) publishes defense-in-depth best practices called the CIS Critical Security Controls. These guidelines have developed a reputation for being both effective and practical.