User and Network Infrastructure Planning and Management

This chapter provides readers with a series of steps and tools to improve their organizations' network infrastructure protection through improved asset access control, data security, protection policies, maintenance procedures, and automated protection processes. Infrastructure planning and management is all about building safeguards and security controls into professionals' organization's networks and assets. The chapter focuses on the critical concepts in the Framework for Improving Critical Infrastructure Cybersecurity, developed by National Institute of Standards and Technology. Remote access is simply the act of accessing organizational systems through external networks such as the internet. One of the biggest challenges in identity management is associating a set of online or other digital activities with a specific individual or entity. Configuration management is a technique for monitoring and controlling all forms of development activity. The chapter discusses the basic principles of evaluating risks and properly implementing solutions such as patch management, firewalls, back‐ups, security awareness, awareness training, and more.