
Reduce exposed access
Review accounts, permissions, authentication, unused software, and public interfaces. Remove access that no longer serves a business need. Explain any licensing or platform limits before delivery.
Keep important software supported and test updates. Inventory dependencies so abandoned components are not silently left in production. Choose the next task from the review rather than repeating the calendar.
- A written brief
- Named responsibilities
- Agreed review points




