Critical Control Management - CERTNZ

Each year CERTNZ reviews their recommended list of critical controls based on the incidents they have seen in the prior 12 months.

CERTNZ is your first port of call when you need to report a cyber security problem. They are a government organsiation here to support businesses, organisations and individuals affected by cyber security incidents, to provide trusted and authoritative information and advice.

CERTNZ's Critical Controls 2022 are:

1. Patch your software and systems

2. Implement multi-factor authentication and verification

3. Provide and use a password manager

4. Configure logging and alerting

5. Asset lifecycle management

6. Implement and test backups

7. Implement application control

8. Enforce the principle of least privilege - minimum access levels

9. Implement network segmentation

10. Set secure defaults for macros

For more detail see CERTNZ Critical Controls 2022 and speak with your computer support specialist.