The second level would be security which consists of processes to ensure that the security of the perimeter or the data is not compromised and that it is available when needed. The basic requirements of the 2 levels are as follows and the processes should address these areas at minimum.
Level 1:
- Performance monitoring: To ensure all systems are operating as expected.
- Hardware refresh schedule: To ensure that the hardware on the perimeter are maintained and replaced on a specific cycle.
- Patch schedule : To ensure that there are documented upgrade processes for application and system patches
- Application update processes: To ensure that updates to applications comply with the companies SDLC.
- Performance reporting: To ensure that management is informed of performance and to develop a history of the perimeter performance.
- Vendor management guidelines for each vendor used to support the network perimeter.
Level 2:
- Security monitoring: To ensure that there are no internal or external threats to the network perimeter.
- Security patch process: To ensure that security patches are applied in a controlled manner.
- Security reporting: To ensure that management is informed of security posture and incidents as well as to develop a history of the perimeter security.
- Incident response processes: To ensure that potential security incidents are identified effectively and that they are followed up on effectively.
The fourth category “Retirement processes” Consists of processes for removing an element from the perimeter. Very often this category is non existent and could lead to enormous security exposure even before the Internet old forgotten connections, servers or services were the favorite target of hackers. These processes must detail:
- The approval process for removing something from the network perimeter. The technical steps for removing something from the network perimeter
- The technical steps for updated any related devices that support the network perimeter (i.e. Firewalls, routers)
- Requirements for updating the performance monitoring due to the removal.
- Requirements for updating the security reporting due to the removal.
Some additional items to consider when performing your review of
Popularity: 1%
