The mundane majority
Outdated CMS, weak admin passwords, shared accounts, missing backups.
What changes if you're breached
Reputation, regulatory exposure, customer churn - usually in that order.
A pragmatic baseline
Patch, separate accounts, verify backups, log access, run audits.
Key takeaways
- Mundane risks dominate real breaches
- Backups must be verified, not assumed
- Audit cadence beats audit depth

