Network Structure and equipment in commercial buildings and work areasIdentify significant components of an industrial control system or SCADA systemInventory and manage network assets and identify significant business documentsCreate and follow appropriate change management procedures for major and minornetwork changesIdentify significant physical security controls to limit or monitor access to secure areasDescribe the components of a reliable disaster recovery plan and a defensible incidentresponse plan

Network Structure and Equipment in Commercial Buildings and Work Areas: This includes routers, switches, servers, cables, and firewalls. The structure often consists of a combination of wired and wireless connections, with devices connected to switches, which are then connected to routers that link the network to the internet.

Significant Components of an Industrial Control System or SCADA System: These include programmable logic controllers (PLCs), remote terminal units (RTUs), human-machine interfaces (HMIs), communication infrastructure, and the central computer system.

Inventory and Manage Network Assets and Identify Significant Business Documents: This involves creating a comprehensive list of all network assets, including hardware, software, and data. Significant business documents may include contracts, financial records, and operational procedures.

Create and Follow Appropriate Change Management Procedures for Major and Minor Network Changes: This involves establishing a structured approach to transitioning individuals, teams, and organizations from a current state to a desired future state. It includes planning, testing, implementing, and reviewing the changes.

Identify Significant Physical Security Controls to Limit or Monitor Access to Secure Areas: This includes locks, security cameras, access control systems, security guards, and alarm systems.

Describe the Components of a Reliable Disaster Recovery Plan and a Defensible Incident Response Plan: A disaster recovery plan typically includes steps for responding to and recovering from events that cause a significant disruption to network operations. An incident response plan outlines the steps to identify, respond to, and recover from security incidents.