Security begins with a comprehensive assessment including physical premises review, connectivity and digital access review, vulnerability scan, internal access review and solution configuration review. Follow-up assessments should be conducted no less often than annually. Security solutions include firewalls, intrusion detection, antivirus, virtual private networks, router configurations, user configuration, group policies, and finally a thorough and well distributed security policy across the enterprise with low tolerance for violation.