Network Security Plan Development

This assignment requires creating a comprehensive network security plan template for an organisation, focusing on the mission of the project. The plan should include an introduction, scope, objectives, assumptions, disaster recovery and business continuity, security strategies and recommended controls, residual risks, resources, and conclusion. The plan should provide clear descriptions of the organisation, its needs, security issues, action plans to address these issues, and respective recommendations. It also requires identifying deliverables, milestones, and business and technical goals for network protection against intruders.

Network Security Plan Template*
Introduction (one page)
Provide a clear and concise description of your network security plan in terms of the
organisation’s needs. Make sure to include a brief description of the organisation, the
business domain, security issues, your action plan to address the issues, and respective
recommendations.
Scope (one page)
Focusing on the mission of the project, describe as clear as possible the deliverables of the
plan and milestones.
Objectives (one page)
Provide clear and concise statements about what the security plan is designed to achieve.
Include the business and technical goals to ensure the network is protected against intruders.
Assumptions (one page)
The information provided in the case study is not comprehensive, therefore a number of
factors need to be assumed. Document any assumptions you make, in preparing the plan.
Disaster Recovery and Business Continuity (five pages)
Business Impact Analysis
Insurance Consideration
Incident Response Team
Physical Safeguards
Prepared Items
Incident Response Procedures
Restoration Procedures
Forensics Considerations
Maintaining the Plan
Security Strategies and Recommended Controls (two
pages)
Security Strategies
Specific recomended Controls to mitigate the risks uncovered.
Residual Risks (three pages)
*Networks and Information Security Case study - Copyright © Edilson Arenas - CQUniversity

List of Residual Risks - that remain after all possible (cost-effective) mitigation or
treatment of risks.
Residual Risk Management Plan - estimate, describe and rate these residual risks to
guide the priorities for ongoing management and monitoring of risks.
Resources (one page)
They include any type of resources like humans, communities of practice, and quality audit
groups required to implement the recommendations.
Conclusion (one page)
*Networks and Information Security Case study - Copyright © Edilson Arenas - CQUniversity