draw a diagram for me
Budget: $10 – $30 USD
It is about security controls in a medium sized scenario. The company has several departments, but we
focus on a customer-facing management department and a research and development department. please take on the role of a security architect (as defined in the NIST NICE workforce framework) for this medium
sized company. a list of security controls to be used and a number of entities that need to be connected
in the internal network. Depending on the role of the entity, you need to decide how they need to be protected
from internal and external adversaries.
Entities to be connected:
● Employee PCs for the customer-facing management department used in the office
● Employee laptops for the sales staff used from home or while travelling
● Company customer databases also used by sales staff (a physical server)
● Employee PCs for research and development for work on future products
● Printer and scanner for general use
● WiFi access point for guests in the office
● Router
● Switch
Security controls and appliances (can be used in several places)
● Firewalls (provide port numbers to be open for traffic from the outside)
● VPN gateway
● VPN clients
● TLS (provide information between which computers TLS is used)
● Authentication server
● Secure seeded storage of passwords
● Disk encryption
● WPA2 encryption
please do the following
1. Create a diagram of your network (using any diagram creation tool such as LucidChart or similar) with
all entities
2. Place security controls on the diagram
3. For each security control explain what it is used for and why
focus on a customer-facing management department and a research and development department. please take on the role of a security architect (as defined in the NIST NICE workforce framework) for this medium
sized company. a list of security controls to be used and a number of entities that need to be connected
in the internal network. Depending on the role of the entity, you need to decide how they need to be protected
from internal and external adversaries.
Entities to be connected:
● Employee PCs for the customer-facing management department used in the office
● Employee laptops for the sales staff used from home or while travelling
● Company customer databases also used by sales staff (a physical server)
● Employee PCs for research and development for work on future products
● Printer and scanner for general use
● WiFi access point for guests in the office
● Router
● Switch
Security controls and appliances (can be used in several places)
● Firewalls (provide port numbers to be open for traffic from the outside)
● VPN gateway
● VPN clients
● TLS (provide information between which computers TLS is used)
● Authentication server
● Secure seeded storage of passwords
● Disk encryption
● WPA2 encryption
please do the following
1. Create a diagram of your network (using any diagram creation tool such as LucidChart or similar) with
all entities
2. Place security controls on the diagram
3. For each security control explain what it is used for and why