On the premise that the best defense is understanding the real nature of the offense – or, in this case, offenses, since cybersecurity addresses a multi-front battleground – it’s useful to think in terms of concentric circles, broad steps any small or midsize business can take to maximize safety.  It may also help organizations match the level of protection to the class of threat they face.  

Companies need to be familiar with online threats and at least somewhat conversant with tools to arrest them; no single system can circumvent vulnerabilities that haven’t been patched.  Still, there are things that businesses can and should do to maximize their safety: