Administrative or management interfaces need to be regulated too. If you have built or use tools that allow team-members to manage production data, consider restricting access to internal networks, or requiring two-factor authentication.
