The 7 CIS controls you should implement first
The CIS Critical Security Controls list (formerly the SANS Top 20 controls) has been the gold standard for security defense advice. These are the tasks you should do first.
Margaret Cunningham Nikki Robinson Software Assets Security Controls Enterprise Assets Access Control
Source: csoonline.com