Cyber Security Audit

[Kenzer161]

I am getting a new laptop and have decided to do a total cyber security audit of my pc, network, and online accounts. I am looking to maximize security and am looking to make a comprehensive checklist. Feel free to recommend anything you feel will help. Some things I have thought of include:

 

• Switch to a password manager/Change all passwords
• make sure all updates are in place (anti virus, anti malware, windows, etc.)
• enable bitlocker full drive encryption
• secure the uefi/bios (I know it can be erased by removing the cmos battery, but its a step)
• encrypt everything
• backups 
• switch to standard user account, secure administrator account
• Edit UAC (user account control) settings 
• Enable 2FA (two factor authentication) where available. 
• Start using a vpn (any recomendations?)
• maybe switch to tor
• lock down unused ports

I am running windows 10 pro and I am pretty technically inclined, however feel free to add any recommendations. My point is to maximize security even if the user experience could be slightly effected. I want to lock down my pc and network as best I can. 

[sazrocks]

• Use SELinux

[Guest]

If you do not need Silverlight or flash, then uninstall them. Monitor and block unnecessary traffic.

Edit: Consider running your browser or other applications in a container or virtualize them.

Edit 2: Also disable SMB1.0 (It will automatically be disabled in the fall update) 

[aeroencychris]

Tor is a bit excessive in my opinion, but I guess it depends on what you're doing on the web?

[SCHISCHKA]

tor is privacy not security.

If you want secure browsing then do not save passwords for your modem's web access & change your modem's default password.

Use a different browser for web surfing and logging into user accounts or use firefox profiles