There's an English phrase that says a chain is no stronger than its weakest link, which means that
a group is only as strong as its weakest link.
In networking terms, this holds the core, as discussed and explored in previous lectures.
You, as a new network security expert need to identify and account for a single point of failure and
implement a highly dependable process that will be put in place to mitigate such instances.
We should also ensure that the appropriate controls are implemented around such suspectable resources
of the network as per their risk profile.
Continuous monitoring and improvement.
Proactive network scanning should be implemented to hunt for unauthorized devices in the network and
to monitor for suspicious activity in the network.
This would ultimately lead to the requirement of a well defined incident response mechanism.
Being a critical operational function in OC also needs to aim for continuous improvement concerning
processes, approaches and turnaround time to showcase business outcomes and value creation.
The major focus here is to verify whether all the deployments are accurate and operate as expected.
The idea is to evaluate the actual versus expected levels of service delivery and performance.
Now that we are familiar with the various network security concepts and their key components, next
we will take a look at the systematic approach that organizations should follow for a comprehensive
network security architecture.
Due diligence and cyber resilience.
An organization must have a cyber security program that aims to annually review the cyber resilience
of the organization's network.
This is important for various aspects.
First, this ensures that the operations team is ensuring due care and due diligence across the network.
This gives the leadership and operations team visibility into how the network has evolved over this
period and what new changes have been made.
So how they impact the network topology and how these changes the threat landscape from the organisations
in terms of new threats and vulnerabilities, respectability that may stem from these changes.
This also helps in mapping the relevancy of the security controls and level of compliance.