Security and good IT management go hand-in-hand: a well-managed network is more difficult to attack than a poorly managed one. Regardless of the size of the business or the industry, start by asking yourself these questions:

1. Do you know what is connected to your technology assets and business networks?
2. Do you have a inventory of software is running on your systems and across the networks?
3. Are systems set up with security to protect, detect and respond if needed to a incident?
4. Do you monitor successful access and privileges to systems?
   
5. Is your staff clear about their role in protecting your organization from cyber incidents?

THE PROACTIVE RISK MANIFESTO

• We recognize that open-source and commercial software has become a foundation of our modern world. We recognize the awesome responsibility providing services to our clients
• We recognize that our work will be used in ways we cannot anticipate, in ways they were not designed, and for longer then ever intended.
• We recognize that our work will be attacked by talented and persistent adversaries who threaten our clients physical, economic and national security
• We recognize these things and we choose to be in this business helping our clients every day.​
• We will be secure because our people refuse to be a source of vulnerability or weakness. We will be secure, not because it is easy, but because it is necessary and we are up for the challenge.