Least Privilege
Business ownes may feel as though the principle of Least Privilege only applies to government Spooks, however, a simple example – removing administrator rights from all desktop users at a company – could be the difference between ransomware compromise and no incident at all.