The 90-Day plan breaks security improvements into weekly tasks to harden accounts, payments, and AI integrations without stopping your business

Week 1 — Inventory & Access Control

• Create a single inventory of critical accounts (email, bank, payment, social, hosting).
• Enable 2FA and replace simple passwords with passphrases or hardware keys where possible.

Week 2 — Payments & Gateways

• Harden payment gateways: enforce strong admin access, enable fraud filters, and set payout limits.
• Implement cold-vault protocols for high-value assets (crypto/business bank accounts).

Week 3 — Team & Vendor Security

• Audit team access, remove inactive users, implement least-privilege roles.
• Require vendors to follow a minimal security checklist.

Week 4 — Scams, Deepfakes & AI Controls

• Adopt Verification Out-of-Band (VOB) for high-risk requests.
• Add AI-use protocols: watermarking, data minimization, and internal LLM policies.