Loading content
Conceptual overview of measures, architectures, and practices to protect networks, systems, and data.
Network security protects networks, systems, and data from unauthorized access, tampering, and misuse through technical controls, monitoring, and organizational policies. It includes perimeter and host defenses, access controls, encryption, network segmentation, and incident detection and response. The primary goals are confidentiality, integrity, and availability of critical services.
Average time between incident start and detection.
Average time to containment and recovery.
Share of network traffic protected by accepted encryption methods.
Use of stateful firewalls and standardized rule sets to secure branch networks against the Internet.
Microsegmentation combined with strong authentication for internal services to hinder lateral movement.
Central VPN with multi-factor authentication, endpoint assessment, and logging of sensitive access.
Inventory, risk assessment, and define objectives.
Design: zone model, access controls, and monitoring architecture.
Implement: configure firewalls, segmentation, and logging.
Test, go-live, and continuous improvement.