Layers of cybersecurity is the idea that no single control stops everything, so the organisation stacks several and each catches what the one before missed. The elements of layered security for a small organisation are five: the people and their policies, the sign-in, the devices, the network and the backup. How does cybersecurity work when a phishing email gets through the filter? The person's training is the next element of layered security, the sign-in's second factor the one after, the device's protection the one after that, and the backup the last. Security threats and solutions match that way, threat by layer. This page is the five layers in plain words, and the free policy sheet on this site sizes the first, the written programme, from the organisation's own facts with no account.
The five layers
People and policies: what staff are trained to do and what the organisation has written down. Sign-in: passwords and a second factor. Devices: protection, patching and encryption. Network: the firewall and the segment the card terminal sits on. Backup: the copy that survives the rest failing. NIST's framework organises the same controls by function; the layers organise them by what fails first.
How it works when a layer misses
A phishing email passes the filter; the trained person does not click, or clicks and the second factor stops the sign-in, or the sign-in succeeds and the device's protection stops the payload, or the payload runs and the backup restores the files. Each layer is a chance the previous one did not give.
Threats and solutions, layer by layer
Phishing meets training and the second factor; ransomware meets device protection and backup; a lost laptop meets encryption and remote wipe; a leaver's lingering login meets the access policy. The policy sheet on this site sizes the written layer: 12 people, 8 systems with their own login, remote work, card payments and personal devices is a set of nine policies, 27 hours to draft, 13.5 hours a year to keep reviewed and $1,822.50 in the first year at $45 an hour. Hardenvo Pro generates and keeps that layer current at one flat price; the other four are controls the organisation buys.
Questions people ask about layers of cybersecurity
What are the layers of cybersecurity?
People and policies, sign-in, devices, network and backup: five, each catching what the one before missed.
How does cybersecurity work in practice?
A threat that passes one layer meets the next; a phishing click meets the second factor, a payload meets device protection, encryption meets backup.
Which layer does Hardenvo cover?
The written one: the policies the people work to, sized by the free sheet and kept current by the paid plan.