IT security checklist for middle market businesses

Domain name services security

Domain name services, or DNS, security is a method of web filtering that blocks malicious traffic on the internet. DNS traffic often flows through firewalls, making a different approach to security necessary. Without DNS inspection and filtering, workers may click on malicious website links and phishing emails, infecting your systems with malware. In this era of hybrid work, DNS security is especially important because it enforces the same security policies for remote workers as for in-office employees.

Cisco Umbrella DNS-level security provides a new layer of breach protection and internetwide visibility both on and off the network, as well as instant failover for seamless availability.

Multifactor authentication

Multifactor authentication—MFA—strengthens identity and access management by using a secondary method of authentication. Passwords are a notoriously ineffective method of controlling access, so MFA adds one or more extra layers of protection, such as a token, a single-use code or a biometric verification.

Middle market companies need MFA for access and authority management when remote users are accessing the network.

Cisco Secure Access by Duo uses an interface to provide a fast, non-disruptive, and simple authentication experience for users.

Backup strategy

Ransomware is one of the biggest threats in today’s risk landscape, making a backup strategy indispensable for middle market businesses. When a ransomware attack hits, it encrypts all company files and sometimes deletes on-site backup files.

Middle market companies need a way to recover files, network equipment and hardware configurations after an attack. An effective backup and recovery strategy involves making several copies of data on different storage mediums and storing these backups both on-site and off-site, which can be accomplished with the cloud. Companies should also make regular backup and recovery testing a part of their strategy.

RSM provides managed services for backup that help mid-market companies follow data protection best practices, including backing up data in multiple locations and regularly testing backup and recovery.

Patch management

Cybercriminals often exploit unpatched applications, servers and devices to stage attacks. After an attack, malware may spread, moving laterally to unpatched parts of the system. Exploit attacks can also originate at the unpatched asset when cybercriminals use code to gain access and unleash malware through the vulnerability.

Workstations and hybrid servers need to be protected with patch management that conducts regularly scheduled scans to uncover and eliminate any vulnerabilities.

RSM takes over the burden of keeping track of and implementing patches through our managed services.

Next-generation firewalls

When middle market companies apply for or renew their cybersecurity insurance policies, many insurance providers now require a next-generation firewall, or NGFW, to issue a policy.

NGFWs provide additional features that aren’t included in traditional firewall solutions, such as application awareness and control, an integrated intrusion prevention system and cloud-delivered threat intelligence. A top NGFW enables full visibility across the network and offers accelerated threat detection.

Cisco Secure Firewall makes a zero-trust approach to security achievable and cost-effective for SMBs through network, microsegmentation, and app security integrations.