* User Domain - defines the people who access the organization’s information system. * User Accountability – the most important measure to be taken in this domain is to make sure that the users are well trained and are aware of the risks that are out there. * Workstation Domain - Any device that users use to connect to your network. * Viruses or malware – to keep viruses and malware at bay it is best to use workstation antivirus software frequently and definitely keep this software up to date. As without the updates antivirus software is almost worthless. * LAN Domain – consists of all machines connected to your network in a local setting. * Unauthorized access to the LAN commonly comes from unlocked wiring closets and data-centers. Simply keep these items under lock and key and well organized and at least the hard lines are secure. * LAN-to-WAN Domain – where the IT infrastructure links to a wide area network and the Internet. * If local users download unknown file type attachments from unknown sources, then you should apply file transfer monitoring, scanning, and alarming for unknown file types from unknown sources. * WAN Domain- connects remote locations to your domain. * If you are vulnerable to eavesdropping, use encryption and VPN tunnels for end to end secure IP communications. Also, follow your data classification standards and guidelines. * Remote Access Domain- connects remote users to your domain. * To stop brute-force and user ID and password attacks you must establish a strong password policy. Passwords should be changed every 30 to 60 days and must be at least eight characters long. * System/Application Domain- holds all the mission-critical systems, applications and data. * I f your private data is compromised separate private data elements into different databases. For archiving purposes, encrypt data within databases and storage devices.