Define RPO (how much data loss is tolerable) and RTO (how long downtime is tolerable) per system. Email, file shares, and databases differ.
Test restores for both ransomware scenarios (immutable copies) and fat-finger deletes (versioning).
Cloud sync is not backup; ransomware can encrypt synced folders if misconfigured.
Triaging saves money: know the difference between a single bad cable and a design problem.
Segmentation limits how far an intruder or malware can move once inside.
VPNs extend the office network—not every app should ride the tunnel forever.
Fast internet at the modem means little if wireless is congested or poorly placed.