Participate in annual 3rd party pen tests

Participate in annual 3rd party purple team tests

Participate in annual risk assessments

Participate in all other 3rd party security reviews

Conduct internal pen tests regularly

Review patching solution logs

Review MDR alerts

Participate in monthly MDR meetings and complete action items

Confirm all data is ingested into SIEM and operational

Review DLP web, file and email solution logs

Review AV logs

Azure hardening

AD hardening

Monthly access reviews and maintain access control platform

Create, lock down and maintain server and workstation images

Continue rollout of password-less

Conduct and review phishing tests and re-training

Complete multiple client security questionnaires yearly

Quarterly policy reviews and updating policies