Network Security Plan Template

The assignment is to create a comprehensive network security plan template, which includes an introduction, scope, objectives, assumptions, risk analysis, security policies, disaster recovery and business continuity, security strategies and recommended controls, residual risks, resources, conclusion, and references. The plan should address the organisation's needs, including description of the organization, business domain, security issues, action plan to address issues, and respective recommendations.

Network Security Plan Template*
Introduction (one page)
Provide a clear and concise description of your network security plan in terms of the
organisation’s needs. Make sure to include a brief description of the organisation, the
business domain, security issues, your action plan to address the issues, and respective
recommendations.
Scope (one page)
Focusing on the mission of the project, describe as clear as possible the deliverables of the
plan and milestones.
Objectives (one page)
Provide clear and concise statements about what the security plan is designed to achieve.
Include the business and technical goals to ensure the network is protected against intruders.
Assumptions (one page)
The information provided in the case study is not comprehensive, therefore a number of
factors need to be assumed. Document any assumptions you make, in preparing the plan.
Risk Analysis (14 pages)
Asset Identification and Assessment
Physical Assets
Non-Physical Assets
Risks
Individual Asset Risk Analysis
Risk Summary
Threats, Challenges and Vulnerabilities
Threats
Challenges
Vulnerabilities
Security Policies (10 pages)
Acceptable Use Policies
Email and Communications Policy
Internet and Network Access Policy
Workstation Policy
Network Security Policies
Antivirus Policy
*Networks and Information Security Case study - Copyright © Edilson Arenas - CQUniversity

DMZ Policy
Extranet Policy
VPN and Remote Access (Work-at-home) Security Policy
Wireless and BYOD Policy
Firewall Policy
Intrusion Detection Policy
Vulnerability Scanning Policy
Internet Policy
IP Address and Documentation Management Policy
Physical Security Policies
External Protection
Internal Protection
Personnel Policies
Visitors Policy
Employee Hiring and Termination Policy
User training Policy
Data Policies
Information Classification and Sensitivity Policy
Encryption Policy
Backup Policy
Password Management and Complexity Policy
System and Hardware Policies
Hardware Lifecycle and Disposal Policy
Workstation Policy
Switch and Router Policy
Server Security Policy
Logging Policy
Disaster Recovery and Business Continuity (five pages)
Business Impact Analysis
Insurance Consideration
Incident Response Team
Physical Safeguards
Prepared Items
Incident Response Procedures
Restoration Procedures
*Networks and Information Security Case study - Copyright © Edilson Arenas - CQUniversity

Forensics Considerations
Maintaining the Plan
Security Strategies and Recommended Controls (two
pages)
Security Strategies
Specific recomended Controls to mitigate the risks uncovered.
Residual Risks (three pages)
List of Residual Risks - that remain after all possible (cost-effective) mitigation or
treatment of risks.
Residual Risk Management Plan - estimate, describe and rate these residual risks to
guide the priorities for ongoing management and monitoring of risks.
Resources (one page)
They include any type of resources like humans, communities of practice, and quality audit
groups required to implement the recommendations.
Conclusion (one page)
References (one page)
*Networks and Information Security Case study - Copyright © Edilson Arenas - CQUniversity