To be developed
Areas of Responsibility: Locations and routes that you control (like your laptop) which you are responsible for managing.
Areas of Interest: Locations and routes that you don’t control but can affect you such as the internet, or guest devices that connect to your network, or partner networks.
Areas of Content Responsibility: Locations and routes that you don’t control, but that your assets are located in, such as your bank or cloud services.
Individual devices vs physical locations (eg ‘office’, ‘home’)
Map out the space - the computer networks - where your assets are located and moved through. Include:
Include physical as well as virtual computer network locations
For data assets this will be your computer networks, where the data is ‘at rest’ or ‘on the move’
What defences are already in place on each route to prevent unauthorised access?
Tools to explore, monitor and alert
Back to Playbook ● Office Example ● Next: Threats ● Starter Network Register