The RSI security website breaks down the ways in certain detail, but the method in essence goes like this: Set up firewalls and router specifications, which established principles for enabling and denying entry to your units. Firewall configurations should be reviewed bi-yearly to be sure there isn't any faulty access https://www.nathanlabsadvisory.com/blog/tag/best-practices/