Make at least two recommendations of mitigations the business can implement to prevent incidents like this in the future ?

1. Implement a strict access control policy: The business should restrict access to sensitive information and systems to only authorized personnel. This can be done through the use of strong passwords, multi-factor authentication, and regular audits of user access rights. By limiting access to only those who need it, the business can reduce the risk of insider threats and unauthorized access.

2. Provide regular cybersecurity training: The business should invest in regular cybersecurity training for all employees to educate them on best practices for protecting sensitive information and recognizing potential security threats. This training should cover topics such as phishing scams, social engineering tactics, and the importance of keeping software and systems up to date. By increasing employee awareness of cybersecurity risks, the business can help prevent incidents like the one that occurred in the future.