Tag archive
A 6–10 week, step-by-step enforcement plan for IT managers: inventory every sender, publish correct SPF and DKIM, read DMARC reports, and ramp safely to p=reject without losing a single legitimate email.
From an F grade to a hardened A: deploy HSTS, nosniff, frame protection and Permissions-Policy immediately, then roll out Content-Security-Policy in three safe stages - with nginx and Apache configs.
A complete NIST-based incident response plan sized for small IT teams: severity levels, contact cards, tested backups, containment without destroying evidence, GDPR 72-hour notification and blameless post-mortems.