Version 2.4 10/18/04
Risk-driven – focus on those opportunities with
highest risk reduction bang for the buck.
Make security the default wherever possible.
Achievable, affordable plans.
Concrete steps and
early deliverables. Extend early successes in
Security-in-depth: prevention, detection, response.
Evaluate a network design and migration strategy
that balances availability against security, and
capable of supporting broader preventative network