Step 1: Identify Security Objectives
First, I would determine my attack vectors. What are my threats? In what
ways am I vulnerable to an attack? Then, I must determine what a secure
network means to me. Is it OK if some people from the internet access my
computer and files? How can I control that access? Or, should the entire
network be completely locked down? Since I enjoy accessing my files and
giving friends access to my local file server, I will need to allow some
internet access to my personal network. I want to make sure that only
those who have authorization can access my stuff, so I hand out my
server's address with a username and password unique to each person.
Step 2: Identify Assets and External Dependencies
DMZ - Ensure access controlling firewall is up to date and is handling new
connections.
