The foundation.
WHAT TO UPDATE
Operating systems Applications Browsers and extensions Firmware, where applicable
WHY IT MATTERS MOST
Updates fix known weaknesses.
Once a weakness is published, automated scanning for it begins.
WHAT TO ENABLE
Automatic updates, wherever practical.
WHY AUTOMATIC
Manual updating depends on someone remembering.
WHAT TO CHECK MONTHLY
That updates are actually applying.
Devices frequently stop updating without anyone noticing.
WHAT ABOUT UNSUPPORTED DEVICES
A device no longer receiving updates is a permanent weakness.
Replace it, or isolate it from anything that matters.
THAT APPLIES TO PHONES TOO
Older phones stop receiving security updates while working perfectly.
WHAT TO DO ABOUT RELUCTANCE
Schedule updates rather than avoiding them.
WHAT DELAYS COST
Every day between a fix being available and applied is exposure.
WHAT TO RECORD
Which devices exist and whether each is current.