Know and prioritize your information. You are nowhere if you don’t know your network and then prioritize what you need to defend. You can’t defend what you don’t know, and there’s no way to defend every file, database, and folder equally. Invest the time in knowing the organization’s network.
