Enterprise-Grade It Security for Small and Medium Businesses: Building Security Systems, in Plain English

Understand the IT security features that are needed to secure the IT infrastructure of a small to medium-size business. This book will give IT managers and executives a solid understanding of the different technology solutions that their business relies upon-or should be employing-in order to make reasoned decisions regarding the implementation of those features. Coverage includes multi-factor authentication, firewalls, zero-trust environments, network segmentation, remote access solutions, and the people aspects of security that are often overlooked and represent an organization's biggest vulnerability.
Chapters on the various technologies such as multi-factor authentication and zero-trust environments explain in plain English the values and benefits that each technology provides. Clear technical explanations are accompanied by business case explanations that explain the "why" of each technology and when each technology should be implemented. You will come away equipped to have business-driven discussions with your IT staff that allow for a productive balancing of the need for security with the need to do business and drive profits.

You Will Learn

• The importance of multi-factor authentication
• The limits of what multi-factor authentication can protect
• How firewalls are used to protect your company from attackers
• What zero-trust environments are and what they mean
• Whether zero-trust networks are what is needed to secure your own environment
• The security benefits from implementing a network segmentation policy
• The best ways to access files and resources from remote locations outside the office

Who This Book Is For
Managers and executives at small to medium-size businesses who want to understand the core aspects of IT security on which their business relies, business leaders who want to be able to follow along with and engage in discussions with IT professionals about security features, and leaders who are tasked with making decisions on which IT security features to implement

了解保護中小型企業IT基礎設施所需的IT安全功能。本書將使IT經理和高管對業務所依賴或應該採用的不同技術解決方案有深入的了解，以便就實施這些功能的決策做出明智的判斷。內容包括多因素身份驗證、防火牆、零信任環境、網絡分割、遠程訪問解決方案以及常常被忽視且代表組織最大弱點的安全人員方面。
關於多因素身份驗證和零信任環境等各種技術的章節以通俗易懂的方式解釋了每種技術提供的價值和好處。清晰的技術解釋配有業務案例解釋，解釋了每種技術的原因以及應該實施每種技術的時間。您將具備與IT人員進行以業務為導向的討論的能力，以實現安全需求與業務需求和利潤驅動之間的有效平衡。

您將學到

• 多因素身份驗證的重要性


• 多因素身份驗證的保護範圍


• 防火牆如何保護公司免受攻擊者的侵害


• 零信任環境的定義和意義


• 零信任網絡是否是保護您自己環境所需的


• 實施網絡分割策略的安全益處


• 從辦公室外的遠程位置訪問文件和資源的最佳方法

適合閱讀對象
中小型企業的經理和高管，希望了解業務所依賴的IT安全的核心方面；希望能夠跟上並參與與IT專業人員討論安全功能的商業領導者；以及負責決定實施哪些IT安全功能的領導者。