Network Security Architecture/Strategy for a Small Non-Profit

I am talking to a small non-profit law firm (about 30 employees) about a strategy to improve their approach to security. They have a hybrid work mode, with some people working out of the physical office and many people working remotely from home or from the field. There is an on-prem domain controller with Azure AD Sync set up for their Microsoft 365 accounts. MFA is enabled for all users for Microsoft 365. They have just a signature-based anti-malware currently. …

architecture cybersecurity network network security non profit security security architecture strategy