One-time setup
- Multi-factor sign-in on everyone’s email and on admin accounts
- Separate admin accounts, and old accounts closed
- Protection set up on every computer
- Email filtering, and your domain set up so it is harder to fake
- Backups for email and files, a copy kept separate, and a test restore
- Monitoring on each computer: updates, disk space, security alerts