Network security: a specialist field that starts with architecture
COREIT designs so that security is built into the infrastructure architecture. Specialist security monitoring and response is a different field, with its own team and processes.
Summary: An information page on network security: layered defense, Zero Trust, segmentation and tested backup. Specialist security monitoring (SOC) is a separate field outside the Care plans; this page carries no service plans.
These are reference figures. COREIT provides further detail suited to each system when talking with the customer.
How COREIT builds security into the architecture
Layered defense
Edge (next-generation firewall, HA), network (DMZ and VLAN segmentation), endpoints (EDR) and data (backup) protect together, never relying on a single device.
Zero Trust and least privilege
Every person and device must authenticate and reach only what is permitted. VPN or ZTNA for remote access.
Segmentation to contain incidents
If one zone is breached or infected, it does not spread to others and infected devices are isolated.
Backup and recovery that is tested
Backups follow the 3-2-1 rule, include an immutable copy, and recovery is tested regularly.
The line between infrastructure monitoring and network security
| Infrastructure monitoring (Care) | Specialist network security | |
|---|---|---|
| What is watched | Devices, links, power, servers, Wi-Fi | User behavior, malware, intrusion, vulnerabilities |
| Question answered | Is the system running reliably? | Is anyone attacking or exploiting the system? |
| Tools and people | Monitoring tools, operations engineers | SIEM/XDR, analysts, an incident response process |
| Output | Alerts, performance reports, infrastructure incident handling | Detection, investigation, response, incident reporting |
| Where it sits at COREIT | Care plans (infrastructure monitoring) | Defense architecture design and specialist information on this page |
Reference standards
- ISO/IEC 27001 Information security management system; the basis of the assess, design, monitor, improve cycle.
- NIST Cybersecurity Framework A framework of identify, protect, detect, respond and recover.
- CIS Controls A prioritized list of controls by maturity level.
These are reference frameworks for how we work. COREIT does not claim the corresponding certifications.
Want to discuss network security for your system?
This page is for information only. Leave your contact and an engineer will discuss your situation and direction.