Limit what is collected and exposed
Keep only the information a service needs and review who can access it. A large concentration of personal data can increase the impact of an exposure.
Review access and configuration
Check permissions, service settings and account activity regularly. Unnecessary access and overlooked system exposure can make an incident harder to contain.
Prepare a response before an incident
Maintain an inventory of important systems, clear reporting responsibilities and a plan for preserving useful logs. A rehearsed process helps teams make decisions with better information.
Remember the follow-on risk
Exposed identity details can make later phishing or impersonation more convincing. An accurate name or account detail in a message is not proof that the sender is legitimate.