Identify and map your digital assets (on-premises and in the cloud, to know who you are digitally) to limit unnecessary visibility and potential attacks.

Determine the necessary and sufficient digital perimeter and investigate the appropriate security resources and solutions (based on the principle of return on investment in the event of a disaster).

Once the first two stages have been completed, it is necessary to bring users up to the right level of knowledge and skills, and to maintain security levels (including covering operational risks with an appropriate cyber insurance policy, while outmaching exclusion prerequisites).