Security
Good security is implemented in a layered approach.
Workstation Computers
Workstation security starts with good antivirus software to protect the contents of the drive and to attempt to prevent malicious software installation.
It is also a good practice to protect email, both incoming and outgoing, from malicious software and phishing attacks. Phishing is the attempt to target users through fake links… links that indicate they are from reputable sources but really are not.
Education is probably the most overlooked form of protection. Educating users to help them identify malicious emails or websites can go a long way in preventing ransomware and other forms of malware.
Everything Else
The majority of everything else typically involves protecting servers and the perimeter of the network.
Although servers should never be used on a day to day basis by individuals it is a good idea to put antivirus and other forms of protection on them.
The perimeter of a network is where your network meets the Internet. The vast majority of networks connect to the Internet at one point and then, internally, distribute Internet access to the workstations. We protect this one point with a firewall. A firewall can interrogate everything passing into and out of the network. A firewall is a must have.