As a security professional, you must be aware of what is required when you're rolling out IT systems so that they are compliant with local laws. The first area we are going to look at is industry-standard frameworks and reference architectures. You need to understand that policies are derived from regulatory frameworks, but you must have knowledge of non-regulatory frameworks and national and international laws. Also, some insights into vendor and user guides and knowing how the defense in depth model operates is mandatory.
The second area that we must have knowledge of is how to implement a secure network, including intranets, extranets, DMZ, NAT, and the use of honeypots. Network segmentation needs to be designed and the correct placement of security devices such as firewalls, NIPS, and NIDS to ensure your networks are safe.
The next...
