
Reduce exposed access
Review accounts, permissions, authentication, unused software, and public interfaces. Remove access that no longer serves a business need. List the tools the work depends on before committing to them.
Keep important software supported and test updates. Inventory dependencies so abandoned components are not silently left in production. Explain which task matters next and why it takes priority.
- A written brief
- Named responsibilities
- Agreed review points




