Infra and Corporate Security Guidelines?
hello, so I have a customer which has little security policies implemented. and it has landed in my lap to take a look into it. the environment has no vpn for external access, the exchange authentication has simple password policy without two-factor. some attacks have been done to O365 cloud and some accounts were hacked. it is known that internal address directory has been leaked.i was about...