I would lean more towards better use of encryption and firewalls for the sake of simplicity and thoroughness. Can anyone with familiarity describe a solution/s

I would lean more towards better use of encryption and firewalls for the sake of simplicity and thoroughness. Can anyone with familiarity describe a solution/strategy?