Chapter 2. Security Model

Before a security policy can be put into place, the first step is to choose a security model. The security model is the framework within which you develop a security policy that is unique to your company. At its most basic level a security model acts as a checklist, ensuring that there are not gaping holes in your security policy.

But a security model is much more than that. It is a philosophy that guides the way your company approaches security. While most security models cover the same topics, the approaches can vary, as shown in the next section, so it is important to choose one that meshes well with your corporate philosophy.

Before proceeding, it is a good idea to define terms that will be used in this chapter, ...

Get The Practice of Network Security: Deployment Strategies for Production Environments now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.