- Jump box: Acts as an intermediary that allows secure access to preproduction servers while enforcing access controls.
- Network ACLs: Restrict access to only trusted accounts and specified preproduction servers.

NetFlow logs provide visibility into network traffic patterns and volume, which can be analyzed to detect anomalies, including potential security incidents. They can be invaluable in correlating the timing and nature of network events with security incidents to better understand if there is an association.

Rules of engagement are legal documents that should be signed by all parties involved in an assessment to ensure they understand their roles and responsibilities. Rules of engagement define the scope, objectives, methods, deliverables, limitations, and expectations of an assessment project. They also specify the legal and ethical boundaries, communication channels, escalation procedures, and reporting formats for the assessment. Rules of engagement help to avoid misunderstandings, conflicts, or liabilities during or after an assessment.

Application Controls If changes to the application allow for reducing risk while business needs remain satisfied, then why not make use of application controls that further harden the system?
Application control includes completeness and validity checks, identification, authentication, authorization, input controls, and forensic controls, among others. An example of an application control is the validity check, which reviews the data entered into a data entry screen to ensure that it meets a set of predetermined range criteria.