Scenario: After discussing the cyber threat and whether or not it's exaggerated, you head to work and have candid discussions with your leadership about security. Although no one agrees on the "level" of exaggeration in the media, the consensus is that the threat exists and your organization could do a much better job at securing it's enterprise network. Your chief Information Security Officer (CISO) asks you to review the seven domains of the typical IT infrastructure, and describe how you will:
1. Reduce the attack surface with what hardening steps and network security management best practices;
2. Ensure secure authentication, authorization, and accounting;
3. Prevent or respond to intrusions.