Should we get cyber insurance — is the cost less than potential cyber attack losses, or is it a waste of money?

Im in the same situation thats why Im asking. When making a decision first look at what data you have on hand.

Hope this helps.

Absolutely. If I were to add anything: When you try to change everything at once, nothing settles.

We got stuck at the same point for a while. Processes without records never improve because you don't know what to fix.

The harder it is to reverse a decision the slower you should make it. If you have questions, write them; Ill answer as best I can.

Generally correct, but one part is missing. If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

Taking notes for two weeks yields better results than a six-month estimate. Proven by experience.

We need to make a distinction here. If 2FA is on, a stolen password alone is useless.

Of course, it varies if your situation is different.

The opposite happened to me, that's why I'm writing. People defend habits, not processes. Resistance comes from there.

Proven by experience.

Just a heads-up. If permission and scope aren't in writing, don't start that test.

If you have questions, write them; I'll answer as best I can.

Correct. Don't rely on a single measure; go layer by layer.

Proven by experience.

Sorry, but this doesn't apply in every case. The answer varies greatly by industry; there is no one-size-fits-all rule.

The answer varies greatly by industry; there is no one-size-fits-all rule. If you have questions, write them; I'll answer as best I can.

I went through the same thing. Processes without records never improve, because you don't know what to fix.

Let me summarize the topic, since several different answers were given. Most incidents start with a leaked password, not a vulnerability.

Most incidents start with a leaked password, not a vulnerability. Hope this helps.

If you're going this route, sort this out first. The harder it is to reverse a decision, the slower you should make it.

Hope this helps.

here's how it went for us. if the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

good luck with that.

Saved. Just because everyone does it doesn't mean it's right.

Good luck with that.

Let me share my experience. The harder it is to reverse a decision, the slower you should make it.

If 2FA is on, a stolen password alone is useless. This is my opinion, I'm not claiming it's absolute truth.

saved. forgottn test environments are more often the entry point than live systems.

having backups acessible on the same network and with the same identity makes them part of the target then anyway thats all sorry if I went on too long.

Thanks a lot, I'll try it today.

I'll try it.