[Autogenerated] any other tips you can think of that People were
running up to the first assessment or between assessment.
Any other tips?
You can make up the help.
I think one of the other things that's very helpful,
uh,
in your change ticketing process is maybe have a field for this
change forces an update to the network diagram.
Okay.
Again, there's the requirement for keeping an accurate network diagram.
Network diagram is almost a misnomer because you go talk to a
network engineer and you say I want a network diagram.
They're gonna give you a diagram with a bunch of circuits on it.
And you're like, Well,
I can't be mad at you because you gave me what I asked you for.
Can I stop you there?
That's not what diagrams one that always really freaks me out,
right, Right layer to layer three yuan.
Elated diagram relate.
Well, I I want a layer three and maybe even a layer four dagger.
I want I want the better term I like is a topology.
Okay.
I want the components that are relevant to the assessment.
Right?
Right.
So that's going to be network devices, right?
Or or the sort of cloud or suffered a financial structure equivalents thereof.
I want the servers, right.
The hosts, the databases, the web servers.
What have you other devices?
Remote access gateways.
Um, active directory.
Domain controllers.
Things like that, right.
Whatever the technology components are that are the
most Germaine right in the diagram.
So I can understand what's in the environment, toe Look at right.
And that's a little bit of a network diagram and a little bit of ah,
maybe server diagram.
And, uh, you know,
maybe not exactly any one thing other than just sort of topology,
right?
But it's difficult to maintain if your environment changes a lot, right?
And very often we come to the start of the assessment and they say,
Hey, can you put your diagram up on the screen in a Web sharing session?
Something like that.
Before we come on sites, we can talk about it and very,
very often my client's sort of start out by apologizing
Vice is saying this isn't really current,
right?
There's this thing over here that we haven't drawn in yet,
and all this stuff is decommissioned and not there anymore.
And so your your network diagram is is sort of one
part sort of surrealist painting.
In one part, imagination exercise less hopeful, Right?
Uh, so see if you can if you can force ah,
update the diagram after you make this change currents and change management,
then you have a better chance off doing that incrementally rather
than putting it off until the night before it's due.
And then if you've got a GOC team in your organization,
you make that one of the things docs to check and saying,
OK, picks exchange control tickets Did diagram right?
Exactly.