The Pros and Cons of Spreading Out Your Risk

Don't react to baking emails right away and instead make calls, follow up with folks in person. Security education of the employees is huge. Everybody should have a healthy amount of suspicion of incoming email that they weren't otherwise expecting. Have a plan for how to extract yourself from a given cloud service provider in the case of an emergency so you can quickly pivot.