Office network and Wi-Fi: why one flat network is a risk
Guests, cameras, printers and the accounting server on the same network? Segmentation stops one infected device from reaching everything.
Read articleThe company domain is behind the website, email, cloud services and often user logins. Whoever controls the domain registrar account or DNS can redirect visitors, read email or issue certificates in your name. Yet domain accounts are often registered to a former employee's personal email.
Checklist
- Know where the domain is registered and make sure the account belongs to the company, with a shared corporate contact email.
- Protect the registrar and DNS provider accounts with a strong password and MFA.
- Enable registrar lock (transfer lock) so the domain cannot be moved without your approval.
- Turn on automatic renewal and keep payment details current — expired domains are quickly bought by others.
- Consider DNSSEC to protect DNS answers from forgery.
- Remove old DNS records pointing to services you no longer use — they can be taken over.
- Configure SPF, DKIM and DMARC for email.
The domain is the address of your business on the internet. Make sure the keys are in the company's hands.
Need help with this? Contact CySec for a free consultation.