The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

So trickle down economics made things worse…

Quick!!! More of the same thing will fix it , right?

I thought you were going to post this from XKCD

Except it is upside down, should be the other way round if you’re climbing the ladder

No , see when THEY do it, it is terrorism; when WE do it ……….

In 3001 (sequel to 2001) they were able to revive Frank Poole. And in three body problem they thought they could revive just his head — I’m NOT taking any chances!!

🤣🤣🤣

So many points 🤣🤣🤣🤣 for knowing delta-v

On the other hand… do you want them getting out there to infect the rest of the galaxy?

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise