Network Security Policy

Abstract

This chapter discusses that creating a network security policy touches every aspect of your network, and a thorough assessment will take time and careful effort to complete, so your network is as secure as it can reasonably be, given the organizational constraints and considerations you'll have to deal with. It is often helpful to break the network infrastructure down into its systems or areas to help ensure that it covers all the areas, including devices and media, topology, intrusion detection and prevention, system hardening, and all the network components, such as routers, switches, and modems. Once identified all the areas, one needs to take a top-to-bottom look at how security is currently implemented and what threats exist. By looking at issues such as information criticality and performing an impact analysis, one can decide what should be included in one's project and what can reasonably be left out or delayed for a later phase if needed. Understanding the threat environment and your network's vulnerabilities is also important during your planning phase. Scheduling an infrastructure security project is challenging because of all the moving parts involved. There will be lot of scheduling conflicts, resource usage conflicts, timing issues, and more.