The NCSC has shared best practice advice from pen testers which could help improve system resilience.
Original source: Infosecurity Magazine
SecVista Signal