Security baseline + phishing reduction program

Implemented MFA, email protection, endpoint controls, and ongoing training to reduce risk exposure and improve audit posture.