Apply least privilege, monitoring, incident response, cryptography, network controls, and system hardening according to documented policy. Apply it to the observability rollout with documented validation.

Assume perimeter controls remove the need for endpoint and application controls. This ignores a core requirement of the objective.

Disable audit logs after a successful incident response. This weakens safe rollout and creates operational fragility.

Use shared administrator accounts to simplify operations. This leaves avoidable risk for the scenario.