What is a quality requirement for a secure SMB?

A core quality requirement for a modern, secure Small and Medium Business (SMB) is the adoption of a Zero Trust security model. This framework operates on the principle of "never trust, always verify." It mandates that no user or device is trusted by default, regardless of its location. Instead, access to every application is granted on a per-session basis only after the user's identity and the device's security posture have been rigorously verified. This identity-centric approach is a foundational requirement for protecting critical assets against modern threats, moving beyond outdated perimeter-based security.

A. This is a specific, tactical component (endpoint protection) of a comprehensive security strategy, not the overarching architectural requirement itself.

B. This describes a delivery model. While cloud-delivered security is common and effective, it is not the fundamental principle; the security model itself is the core requirement.

C. This is a user experience goal. While desirable, low friction is secondary to the primary security requirement of verifying every access request.

1. Cisco, "Secure the Workforce with Cisco Zero Trust" Solution Overview.

Reference: Page 2, "The Challenge" section. The document states, "Cisco helps you secure all access to all applications by establishing trust in every user and device." This directly supports the concept of identity-based access to every application as a core tenet.

2. Cisco, "What Is Zero Trust Security?" Official Web Documentation.

Reference: "How does zero trust security work?" section. It explains, "Zero trust security is a strategic approach... It’s rooted in the principle of 'never trust, always verify.'... A zero trust architecture enforces access policies based on context—including the user’s role and location, their device’s security posture, and the data they are requesting..." This establishes Zero Trust as a foundational strategic approach.

3. Cisco, "Cisco Zero Trust Solution Guide" White Paper.

Reference: Page 4, "Cisco Zero Trust for the Workforce" section. The guide details that this pillar of Zero Trust "enforces trusted access to applications for your users from any device and any location." This reinforces that the model is centered on identity-based access to applications.