I have a project that requires me to specify cybersecurity guidelines for my assigned business. We are using the nist framework and need to be detailed. I would like suggestions for my assigned business. My business is a wholesaler for hvac, plumbing, pool supplies, and industrial PVF$.$ They have over $500$ suppliers and over $400$ subsidiaries. They serv customers from residitential to industrial. Below are the things that must be included with detail and proper vocabulary.

Describe appropriate authentication credentials.

Account management procedures

Access control management and controls

Connection Security

a$.$ Explain how network defenses should be structured using layering, segmentation, and other controls to achieve maximum confidentiality, integrity, and availability $($CIA$)$

b$.$ Diagram common architecture models for simple secure systems, including components and interfaces of internetworking devices, according to current standards. To include plans for securing client devices $($all client devices appropriate for your company$)$ i$.$ Hardware ii$.$ Software $($operating systems and application$)$

Plans for physical security a$.$ External b$.$ Internal

Vulnerability assessment strategy

Organizational Security

a$.$ Explain the components of a business continuity plan, such as contingency planning, incident response, emergency response, backup, and recovery efforts.

b$.$ Describe a disaster recovery plan that ensures minimal downtime and quick recovery

Security policies $($all types appropriate for your company$-$ more than $2$ policies$)$