Effective defensive security requires a multi-layered strategy - Defense in Depth, which includes:
Physical Security - controlling physical access to facilities
Network Security - Firewalls, IDS/IPS systems
Endpoint Security - Antivirus, Endpoint Detection and Response (EDR) Solutions
Application Security - Secure coding practices, Web Application Firewalls (WAFs)
Data Security - Encryption, Data Loss Prevention (DLP)