Please enable JavaScript.
Coggle requires JavaScript to display documents.
🛡️ 2️⃣ NCA ECC DOMAIN 2 — CYBERSECURITY DEFENSE - Coggle Diagram
🛡️ 2️⃣ NCA ECC DOMAIN 2 — CYBERSECURITY DEFENSE
2.1️⃣ Asset Management 💻
2.1.1 Asset Identification 🔎
Hardware Assets
Servers
Workstations
Network Devices
Firewalls
Storage Systems
Software Assets
Operating Systems
Applications
Databases
Security Tools
Cloud Assets ☁️
Virtual Machines
Containers
Cloud Storage
Cloud Services
2.1.2 Asset Inventory Management 📋
Asset Owner
Asset Location
Asset Classification
Business Criticality
Lifecycle Management
2.1.3 Asset Monitoring 👁️
Asset Discovery
Unauthorized Devices Detection
Configuration Tracking
Security Monitoring
2.2️⃣ Identity & Access Management 🔐
2.2.1 User Account Management 👤
User Creation
User Modification
User Deletion
Account Review
2.2.2 Authentication 🔑
Password Authentication
Multi-Factor Authentication (MFA)
Certificates
Biometrics
2.2.3 Authorization 📝
Role-Based Access Control (RBAC)
Least Privilege
Privileged Access Management (PAM)
Separation of Duties
2.2.4 Access Monitoring 📊
Login Monitoring
Failed Authentication Detection
Privileged User Monitoring
Access Reviews
2.3️⃣ Information System Security 🖥️
2.3.1 Secure Configuration ⚙️
System Hardening
Disable Unnecessary Services
Secure Baseline Configuration
Configuration Management
2.3.2 Patch Management 🔄
Vulnerability Identification
Patch Testing
Patch Deployment
Patch Verification
2.3.3 Application Security 🖥️
Secure Development
Code Review
Application Testing
API Security
2.3.4 Database Security 🗄️
Database Access Control
Encryption
Backup Protection
Audit Logging
2.4️⃣ Network Security 🌐
2.4.1 Network Architecture 🏗️
Network Segmentation
VLAN Security
DMZ Architecture
Zero Trust Network
2.4.2 Firewall Security 🔥
Firewall Rules
Rule Review
Access Control Lists
Logging
2.4.3 Network Monitoring 📡
IDS (Intrusion Detection System)
IPS (Intrusion Prevention System)
Network Traffic Analysis
Packet Inspection
2.4.4 Secure Communication 🔒
TLS/SSL
VPN
Encryption
Secure Protocols
2.4.5 Wireless Security 📶
WiFi Security
WPA2/WPA3
Rogue AP Detection
Wireless Monitoring
2.5️⃣ Vulnerability Management 🔍
2.5.1 Vulnerability Discovery
Vulnerability Scanning
Security Assessment
Penetration Testing
Configuration Auditing
2.5.2 Vulnerability Analysis
CVE Identification
CVSS Scoring
Risk Ranking
Business Impact Analysis
2.5.3 Vulnerability Remediation
Patch Installation
Configuration Changes
Risk Acceptance
Verification
Tools 🧰
Nessus
OpenVAS / Greenbone
Qualys
Nmap
Nuclei
2.6️⃣ Malware Protection 🦠
Antivirus
Endpoint Detection Response (EDR)
Malware Analysis
File Scanning
Application Control
Threat Intelligence Integration
2.7️⃣ Security Monitoring & Logging 📊
Log Management 📁
Windows Event Logs
Linux Logs
Firewall Logs
Application Logs
Cloud Logs
SIEM Implementation 🚨
Log Collection
Correlation Rules
Dashboards
Alerts
Threat Hunting
SOC Operations 🏢
Alert Investigation
Incident Detection
Threat Analysis
Reporting
Security Analytics 🤖
MITRE ATT&CK Mapping
User Behavior Analytics
Machine Learning Detection
Threat Intelligence
🎯 NCA ECC Domain 2 Implementation Workflow
1️⃣ Discover Assets 💻
2️⃣ Classify Risk ⚠️
3️⃣ Apply Security Controls 🛡️
4️⃣ Monitor Continuously 📊
5️⃣ Detect Threats 🚨
6️⃣ Investigate Incidents 🔬
7️⃣ Improve Security Posture 🔄