Summary

At this point, we have the ICS network segmented and protected with firewall and intrusion detection systems. We are also collecting logs and network traffic data, which gives us visibility into network security as well as aids in troubleshooting, incident response efforts, and network forensics practices. This covers the material on network security. In the next chapter, we will look at computer security as it relates to the defense-in-depth model.