An up-to-date list of all software products allows potential security risks to be tracked.

Keeping up to date with vendors' security measures will help evaluate their security.

The risk posed by vendors should be reviewed regularly, as their security status can change over time.

Filtering downloaded content can identify and block malicious code.

EDR systems can protect endpoints from attacks and stop those.

Security patches should be installed regularly and only trusted tools should be used.

Secure update procedures should be integrated as part of the development process.

A clear plan provides the foundation for responding appropriately to security incidents and informing all stakeholders.