Get MFA, network segmentation, immutable backups, patch management on external attack surface, the principle of least privileges done NOW.