What IT controls do hedge funds actually need?

“At minimum: multi-factor authentication on all systems, endpoint detection and response (EDR) on every device, privileged access management, encrypted data at rest and in transit, documented incident response procedures, and annual third-party risk reviews of all vendor relationships.”