NIST Cybersecurity Framework

Sample Solution

Outer Perimeter The outer perimeter of TechWorx is the outermost layer of security for the organization. It includes the perimeter fencing, gates, and parking lot. The key vulnerabilities of the outer perimeter include:

• The fencing is not very high, and it is possible for someone to climb over it.
• The gates are not always locked, and it is possible for someone to enter the property without being authorized.
• The parking lot is not well-lit, and it is possible for someone to break into a car or commit other crimes.

Inner Perimeter The inner perimeter of TechWorx is the area inside the outer perimeter. It includes the main entrance, the lobby, and the stairs and elevators. The key vulnerabilities of the inner perimeter include:

• The main entrance is not always staffed, and it is possible for someone to enter the building without being authorized.
• The lobby is not well-lit, and it is possible for someone to hide or ambush someone.
• The stairs and elevators are not always monitored, and it is possible for someone to access restricted areas without being authorized.

Interior Perimeter The interior perimeter of TechWorx is the area inside the inner perimeter. It includes the offices, conference rooms, and the data center. The key vulnerabilities of the interior perimeter include:

• The offices are not always locked, and it is possible for someone to enter an office without being authorized.
• The conference rooms are not always locked, and it is possible for someone to eavesdrop on a meeting.
• The data center is not well-protected, and it is possible for someone to steal sensitive data.

Critical Areas The most critical areas in TechWorx are the following:

• The main entrance
• The lobby
• The stairs and elevators
• The offices of executives and other high-level employees
• The conference rooms
• The data center

These areas are critical because they contain sensitive information or equipment. It is important to secure these areas to prevent unauthorized access. Recommendations I recommend the following security measures to improve the security of TechWorx:

• Increase the height of the fencing and install barbed wire along the top.
• Lock the gates at all times and install security cameras at the gates.
• Improve the lighting in the parking lot and install security cameras in the parking lot.
• Staff the main entrance 24/7 and install security cameras at the main entrance.
• Improve the lighting in the lobby and install security cameras in the lobby.
• Monitor the stairs and elevators with security cameras.
• Lock the offices and conference rooms when they are not in use.
• Install security cameras in the offices and conference rooms.
• Secure the data center with a physical security system and a network security system.

These security measures will help to protect TechWorx from unauthorized access and prevent theft, vandalism, and other crimes. Figure 1: Outer Perimeter of TechWorx Figure 2: Inner Perimeter of TechWorx Figure 3: Interior Perimeter of TechWorx Type of Access Control Systems I recommend a combination of access control systems for TechWox, including:

• A physical access control system to control access to the building and to restricted areas inside the building.
• A network security system to control access to the organization's network and to sensitive data.
• A video surveillance system to monitor the building and to identify unauthorized activity.

These access control systems will help to prevent unauthorized access to TechWorx and to protect sensitive information.