INTERNATIONAL ISO/IEC STANDARD 18028-1

ISO/IEC18028-1:2006(E)— web-based services,— on-line database services,— on-line storage facilities.Network Services - services provided by the network, usually implemented in software on end-host or serversystems that form part of the network infrastructure, for example:— connectivity,— e-mail,— file transfer,— directory services.Network services may be:— owned and operated by the organization,— owned by the organization but operated by external agencies under contract,— leased from external agencies,— purchased ad-hoc from external providers,— a combination of the above.Network Infrastructure - the underlying hardware and software facilities, for example:— premises,— cabling,— wireless facilities,— network devices (e.g. routers, switches, modems, etc.).As reflected in Clause 12 above, these aspects of network security should be modeled as network facets.These facets build upon each other in effect to form a network security management framework, as shown inFigure 4 below:Figure 4 — Facets in a Network Security Management FrameworkThere is inevitably some overlap, with some systems performing multiple roles in any realistic networkscenario. However, these conceptual facets of functionality should assist the necessary systematic process ofassessment required to determine the security risks present in any particular network scenario. Each facet inthis conceptual security framework should be managed individually, and all the facets should be managedcollectively, to ensure that the overall objectives are met for a secure network.© ISO/IEC 2006 - All rights reserved 47