Prioritize remediating known exploited vulnerabilities. Enable and enforce phishing-resistant multifactor authentication (MFA). Maintain regular backups of critical data, ensure backups are stored ...