Tips for securing infrastructure (small company)

What are your top tips for getting up to speed with the major platforms (AWS, Azure, GCP) in a way that we can find the most practical ways to secure it? As a start going with NIST CSF and SOC 2 has helped with principles to focus on.

Though we would like to be more helpful in our advice to devs than just “make sure there’s least privilege access”. The “how” is often tricky. As an example when we tried …

aws azure csf cybersecurity find focus gcp infrastructure major nist nist csf platforms principles soc soc 2 speed start tips