Fundamental Questions for Network Security
When you are planning, designing, or implementing a network or are assigned to operate and manage one, it is
useful to ask yourself the following questions:
1. What are you trying to protect or maintain?
2. What are your business objectives?
3. What do you need to accomplish these objectives?
4. What technologies or solutions are required to support these objectives?
5. Are your objectives compatible with your security infrastructure, operations, and tools?
6. What risks are associated with inadequate security?
7. What are the implications of not implementing security?
8. Will you introduce new risks not covered by your current security solutions or policy?
9. How do you reduce that risk?
10. What is your tolerance for risk?