I need to study this some more, but there are some good ideas in this cATO playbook, and the manifesto it links to: rise8-us.github.io/cato-play…

(hey, look, it’s an infosec post!)