| 1.1 |  | Overview of Network Security |
| 1.1.5 |  | Security awareness |

| Users are typically not aware of security ramifications caused by certain actions. People who use computer networks as a tool to get their job done want to perform their job functions as efficiently as possible, and security measures are often considered more of a nuisance than a help. It is imperative for every corporation to provide employees with adequate training to educate them about the many problems and ramifications of security-related issues. This training should be based on a corporate security policy.

The technical security training should be provided to all personnel who design, implement, or maintain network systems. This training should include information regarding the types of security and internal control techniques that can be incorporated into the network system development, operations, and maintenance aspects.

Individuals who are assigned responsibilities for network security should be provided with in-depth training regarding the following issues:

- Security techniques
- Methodologies for evaluating threats and vulnerabilities
- Selection criteria and planning for the implementation of controls
- Importance of what is at risk if security is not maintained

For large corporate networks, it is good practice to have a LAN administrator for each LAN that connects to the corporate backbone. These LAN administrators can be the focal point for disseminating information regarding activities affecting the LAN.

Security rules within a policy should exist before a LAN is connected to the corporate backbone. Some of these rules are as follows:

- Provide a well-documented corporate security policy
- Provide controlled software downloads
- Provide adequate user training
- Provide a well-documented disaster recovery plan

Training is also necessary for personnel in charge of distributing passwords. These personnel should ensure that proper credentials are shown before reinstating a forgotten password. There have been many publicized incidents in which people received new passwords by simply acting aggravated, and without presenting adequate credentials.

| Lab Activity Lab Exercise: Student Lab Orientation In this lab, the student will learn the lab topology and learn about the pod naming and addressing scheme.