The defensive security plan is a critical component to the IT systems administrator and company infrastructure. While it takes time to complete, the information within it can be critical to the organizations continued success. The defensive security plan is a living document that should be reviewed often by the organization to keep its information up to date.

Defensive Security Plan Template:

Defensive Security Plan overview

1. Executive Summary
2. Table of Contents
3. Introduction
4. Section 1: Management and Procedures
   1. Asset Management
      1. Vulnerability management
      2. Risk Management
   2. Policy and procedures
      1. Computer use policy
      2. Internet use
      3. Password policy
   3. Security Awareness Education
      1. Malware awareness
      2. Password awareness
   4. Industry Laws and Compliance
      1. Umbrella laws (Patriot Act, HIPPA, etc.)
      2. What laws apply to your company?
5. Section 2: Response and Defense Conclusion
   1. Incident Response
      1. Response plan
      2. Disaster Recovery
   2. Client security
      1. End Point security
   3. Network hardening
      1. Encryption
      2. Hardware
      3. Network segmentation
   4. Software Design Concerns
      1. Coding for security
   5. Monitoring
      1. IDS/IPS
      2. Audits