2. Good information security starts with good physical security
We’ve always kept the hardware locked away, limiting data center access to a small number of employee badges and keeping automated logs of who enters and when. It’s just that now, not every locked room is our own.
For SMBs especially, there are alternatives, ranging from co-lo facilities to full cloud.
But don’t pocket all of the savings from not building out your own data center. Invest some of it in a low-latency, high-bandwidth network connection to your offsite provider. Even better: Apply another old-time principle -- never have just one of anything. Make that two connections, with points of presence on opposite sides of your building, so a back hoe can’t take your business down by digging a hole in an inopportune spot.