5. Our advice

5.1 Watch out for your entry points

To limit access to sensitive data (as opposed to "personal" data, which is less sensitive), it's best to restrict it to a few authorized accounts. This limits the areas at risk.

Use complex passwords with multi-factor authentication. Use HIPS, NPIS and SIDS software to monitor network flows, workstations, drivers and servers.

Use software that prohibits the use of USB keys, the main vectors of intrusive attacks.

A data backup plan, tested regularly, is required via external service providers. Clean rooms located outside the offices enable rapid recovery in the event of fire or external attack.

Awareness of current regulations and training in basic IT...