Index
Checklists
Step-by-step procedures you can work through and tick off, each with sources.
- How to harden account recovery against SIM swapDevelopers and identity teams
Account recovery is where SIM-swap and phishing attacks cash out.
- How to migrate a bank off SMS OTPBanks and credit unions
A sequenced plan for retiring SMS one-time passcodes flow by flow: inventory, meet NIST’s restricted-authenticator conditions in the meantime, ship phishing-resistant replacements, harden recovery, then switch SMS off with a date.
- How to patch a CISA KEV entrySecurity and IT operations teams
A repeatable process for handling a vulnerability CISA has added to the Known Exploited Vulnerabilities catalog: confirm exposure, read the required action, patch or mitigate, check for compromise, and record completion before the due date.
- How to respond to a SIM swapAnyone whose phone number may have been hijacked
What to do, in order, if your phone suddenly loses service and you suspect someone has moved your number: recover the number, lock down email, then banks, then everything that used SMS.