Control of the week: encrypted backups, verified restore.
Backups you've never restored are a hypothesis.
This week: restore one file. Time it. Write it down. That note is the difference between "we have backups" and "we have recovery."
Control of the week: run an access review before July 4.
30 minutes: – List everyone with access to client data – Flag anyone who left, changed roles, or never needed it – Revoke before the long weekend
Attackers love holidays. Empty offices, live credentials.
Do it today.
@Sagenextinfo The fine grabs headlines, but the bigger story is the change in enforcement approach. In 2026, proving that controls are actively implemented and monitored matters more than simply having compliance documents in place.