Network security governance represents one of the Security Consulting function’s most operationally consequential advisory domains, because the network infrastructure whose security architecture the organisation deploys determines the connectivity pathways through which every legitimate business communication flows and through which every adversarial attack must traverse to reach the systems and data that the attack’s objectives require. The network is simultaneously the enabler of the business operations whose digital delivery the organisation’s competitive strategy depends upon and the attack surface whose exposure to the untrusted external environment the internet connection creates as the perpetual adversarial challenge that the security architecture must address with the continuous commitment that the threat landscape’s persistent attention to the network boundary demands.
The Security Consulting function must govern the network security advisory with the strategic awareness that the network security architecture is not a one-time design decision whose implementation the initial deployment creates permanently but the continuously governed capability whose effectiveness the threat landscape’s evolution, the network architecture’s dynamic change, and the technology environment’s transformation together require to be sustained through the active management that the periodic assessment and the continuous monitoring together provide. The network security policy that was adequate for the on-premises architecture of five years ago may be materially inadequate for the hybrid cloud environment of today, and the Security Consulting function must advise with the currency that the network architecture’s evolution demands.
Network Policy #
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
