understand each model to be able to see the whole picture. The OS] models break down the layers of the network process from physical to the application. Understanding each layer helps in looking at what risks there are as well as where they might start. TCPIIP is like the 051 models but is more up to date and does not present as many layers. This model makes for easier troubleshooting because not every supplication uses all the layers of the 081 model. The SAN S 20 controls are a great outline for creating a security plan. It notes down the top controls to consider when creating a security policy