Welcome to SoteriaSec, your trusted partner in navigating the complex world of cybersecurity. Our team of seasoned professionals specialises in comprehensive cybersecurity protection and investigation services for organisations facing breaches or internal investigations.

SoteriaSec provides the references below as a guiding set of protections that organisations should generally be able to implement to limit further a threat actor’s ability to compromise systems. The references and links below are not a comprehensive list of everything that will prevent a cyber attack. They are simply protections intended to make the life of a threat actor harder and to make your life easier in the event you are compromised.

For further details on protecting your organisation, reach out to SoteriaSec .

Multi-Factor Authentication (MFA)

Enforcing Phishing-Resistant MFA (CISA)

Enabling MFA for Common Individual Online Services (ACSC)

Setting Up MFA for all Microsoft 365 Accounts (Microsoft)

Setting Up MFA for all Google Workspace (Google)

Securing Your Password/Passphrase

Enforcing Strong Passwords for On-Premise Systems (Microsoft)

Enforcing Strong Passwords for Microsoft 365 (Microsoft)

Enforcing Strong Passwords for Google Workspace (Google)

Recommended Protections for Windows Enterpirse Systems

Add highly privileged accounts to the Protected Users Group in the Active Directory

Raise the Functional Level of the Domain to Windows Server 2025

Enable Self-Service Password Reset for Users on Microsoft 365

Block Local RDP Connections from non-IT Admin Systems with Windows Firewall

Restrict Service Accounts to specific hosts they are used on

Implement Group Managed Service Accounts

Block Known Vulnerable Drivers

Use Windows LAPS (Local Administrator Password Solution) for Local Administrator Accounts

Recommended Practices for Windows Enterpirse Systems

Windows Log Collection Priority (ACSC)

Enable PowerShell Logging Policy

General Guides for Organiastions

Essential Eight Mitigation Strategies (ACSC)

Guidelines for System Hardening (ACSC)

Microsoft 365 & Google Workspace Secure Configuration Baselines (CISA)

Microsoft Security Baselines

macOS Security Compliance Project (US NIST)

Resources for Staff

Phishing Quiz For Staff (Google)

Support Services if You are a Victim of a Cyber Attack

SoteriaSec - Investigation and Cyber Protection

Scam Phishing via Phone Call or Text Message - Australian Communications and Media Authority (ACMA)

Report Scams via National Anti-Scam Centre (Scamwatch)

Report a Cybercrime in Australia (ACSC)

Personal Information is at Risk from a Cyber Attack (IDCARE)

Report a Scam from someone Impersonating myGov or Services Australia, including Centrelink, Medicare or Child Support (Services Australia)

Tax Related Scam with Your Stolen Personal or Business Identity (ATO)