The First 90 Days
The first 90 days
ESAE Phase 2 Outline
The items listed in this phase are very important and high impact. However, completing these steps takes longer than phase 1. The steps in this phase take a bit of planning and often change controls or change management needs to be involved.
- Deploy Privileged Access Workstations for all admins
- Time-bound privileges (PAM, no permanent admins)
- Multi-factor for elevation
- Just enough administration
- Lower attack surface of domain and DCs
- Attack Detection
