Establishing a security plan may seem easy and almost unnecessary, why not “lock down” a webserver, install a firewall and follow general advise that all servers should follow. While there are guidelines that should be followed for all servers, security is mesh of technology, people, processes and policies. A good security plan matches a company’s security policy and assures that there are no gaps in the process.
According to Microsoft’s Publication Security Guide for Small Business “ there are four steps to creating a good security plan: assess, plan, execute and monitor.”
