Endpoint

Any device that connects to your network and can communicate back and forth - typically end-user devices like laptops, desktops, smartphones, tablets, but also could include IoT devices, printers, or servers in some contexts. Endpoints are literally the "end points" of the network.

‍

From a security standpoint, endpoints are significant because they're often the first targets (via phishing on a PC, or a malware-laced app on a phone) and because a compromised endpoint can serve as a launchpad to attack other resources.

‍

For an SMB, endpoints are usually all the company's computers and phones that employees use.

‍

Each endpoint needs protection (you wouldn't want an unsecured personal device loaded with company email to fall into the wrong hands). Endpoint security measures include requiring a device lock (PIN/fingerprint), keeping devices updated, running endpoint protection software (AV or EDR), and maybe even controlling what can be installed.

‍

Also, if employees use personal devices (see BYOD), you should consider how to secure company data on those - for example, using email apps that can be wiped remotely.

‍

In summary, endpoints are where your users and data intersect the wild world of the internet; securing endpoints means securing that frontline.