Alejandro Santana - Tuesday, March 6, 2018 1:44 PM
The absolute most important thing to check on is... did the backups work and are they viable for a restore. Don't think of another thing until that's hammered down 110%. Nothing else matters until that's guaranteed and the backups are on a different machine than the databases themselves and any tapes are safely stored offsite. That includes at least weekly test restores. I do daily test restores (fully automated, of course).
The second most import thing is to determine who has what privs. Lock down the server. Devs and other so called "super users" should not have privs to deploy their own code and access to data must be locked down lest you read about yourself in the morning news.
The third most important thing is DBCC CHECKDB and it's not far behind backups/restores in criticality.
All three things must be done in very short order and maintained at all times.
--Jeff Moden
Change is inevitable... Change for the better is not.