Cyber security is the main concern of every organization. You have covered every topic beautifully. I would like to add SSL certificates to improve security. When you have a single wildcard SSL managing all your subdomain security, hackers only have to breach through one ssl. A cheap wildcard ssl primary domain and all other domains will be protected from theft.