- Home
- Resources & Insights
- Security Best Practices
Security best practices that stop most attacks
Nine controls, ranked by how much risk they remove for the effort, drawn from incident patterns we and public sources see across Indian organisations.
Identity
Enforce MFA for every user, phishing-resistant MFA for admins, and remove standing admin rights.
Patching
Patch internet-facing systems and known-exploited vulnerabilities within days, not months.
Take DMARC to enforcement and add post-delivery phishing removal.
Endpoints
Run EDR on every laptop and server and make sure someone responds to alerts 24x7.
Backups
Keep at least one immutable or offline copy and test restores every quarter.
Network
Segment users, servers, OT and guests; never expose RDP or admin panels to the internet.
Logging
Centralise logs, sync clocks and keep 180 days to support investigations and CERT-In.
People
Train staff on phishing, UPI and payment fraud, and make reporting easy and blame-free.
Vendors
Give third parties least-privilege, time-bound, monitored access.
Start with the basics, done properly
Advanced tools fail when fundamentals are weak. Phishing, vendor compromise and unpatched vulnerabilities were the three most common ways breaches started in India in IBM's 2025 study. Every one of those is addressed by the controls above.
If you can only do three things this quarter: MFA everywhere, EDR with a response plan, and immutable backups you've tested.
Not sure where to start?
Talk to a Colozal Labs specialist. We'll listen first, then recommend only what your risk and budget justify.