Steps include disabling all unnecessary ports and protocols, enhancing monitoring of network and email traffic, patching externally facing equipment, limiting usage of PowerShell, and ensuring backups are up to date.