Network Security — Revision Notes
⚡ 30-Second Revision
- Checked 18 October 2026.
- NIST CSF 2.0 (2024): Govern, Identify, Protect, Detect, Respond, Recover.
- Authentication = identity; authorisation = permission.
- CERT-In: IT Act 70B; NCIIPC: 70A.
- Encryption does not cure excessive access.
2-Minute Revision
Inventory assets and dependencies before assigning controls. Separate identity, permissions and data protection. Segment networks to limit spread, monitor events with a response process and test restoration rather than merely owning backups. Assess confidentiality, integrity and availability together. International guidance and Indian statutory institutional roles are different kinds of authority.
5-Minute Revision
Classify unauthorised disclosure, altered records and a portal outage by their primary security objective. Explain how a valid login can still have excessive permissions. Draft a five-step response-and-recovery outline for a hypothetical service outage, stating who validates restoration before normal access resumes.
Vyyuha Quick Recall
GIPDRR: Govern responsibility; Identify assets; Protect access; Detect events; Respond to incidents; Recover services.