![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2021\/03\/3-core-2024-062-1024x683.jpg\" "\\"\\"")
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\tSecurity Requirements Analysis for a Municipal Utility<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tA Security Requirements Analysis enables municipal utility companies to plan physical security in a transparent, traceable, and risk-based manner rather than relying on subjective judgement. Our project showed that many security measures were already in place, but they had not consistently been derived from an overarching security concept.<\/em><\/p>Only by assessing protection requirements, criticality, security zones, and vulnerabilities did it become clear which sites, processes, and access points required priority protection.<\/em><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tFrom Legacy Security Arrangements to a Risk-Based Security Requirements Analysis<\/h2>
Our client, a municipal utility company, operates a wide range of site types. These include administrative and customer service facilities, water, gas, and electricity infrastructure, technical network nodes, and publicly accessible facilities.<\/p>
This combination makes physical security particularly challenging. Some areas must remain accessible and customer-friendly, while others contain sensitive information, technical installations, or processes critical to the continuity of essential services. The sites are also accessed by service providers, external contractors, maintenance teams, visitors, and employees with different access requirements.<\/p>
At the sites assessed during the project, a range of security measures was already in place. These included physical protection measures, locking and access systems, technical surveillance systems, and organizational procedures. However, most of these measures had evolved over time rather than being derived from a consistent, overarching security concept.<\/p>
This resulted in a number of typical challenges:<\/p>
- security standards varied from one site to another,<\/li>
- public, semi-public, internal, and critical areas were not consistently separated,<\/li>
- access rights and key management processes were not always derived from the respective protection requirements,<\/li>
- structural vulnerabilities at access points were assessed inconsistently,<\/li>
- technical detection sometimes occurred only at a late stage,<\/li>
- responsibilities, alarm and notification procedures, and escalation processes were not documented consistently across all sites.<\/li><\/ul>
The core issue was therefore not the absence of security measures<\/a>. Rather, there was no overarching benchmark against which those measures could be assessed. A Security Requirements Analysis provides precisely this benchmark.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\n\t\t\t<\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tA Security Requirements Analysis<\/a><\/strong> is a structured process used to determine the level of protection required for specific information, processes, rooms, buildings, facilities, or sites.<\/p>The central question is:<\/p>
What level of harm could result if a specific asset were compromised?<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tThe 3 Core Principles of a Security Requirements Analysis<\/h2>
A Security Requirements Analysis is based on three fundamental principles. They help ensure that security requirements are assessed not only from a technical perspective, but also in terms of potential harm and impact.<\/p>
This integrated approach is particularly important for a municipal utility company, as sensitive information, technical facilities, and processes essential to the continuity of public services must all be protected simultaneously.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"Graphic](\"https:\/\/3-core.de\/wp-content\/uploads\/2026\/07\/Bild36_en-1024x878.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tConfidentiality:<\/strong>
Information must be accessible only to authorized individuals. This includes, for example, site plans, key registers, operational data, alarm and notification procedures, customer data, and technical documentation.<\/p>Availability:<\/strong>
Essential facilities, systems, and processes must remain operational. This is particularly important for a municipal utility company, as disruptions may affect the continuity and security of supply.<\/p>Integrity:<\/strong>
Information, facilities, and processes must not be altered or manipulated without detection. For a municipal utility company, this can be particularly critical where technical systems, control information, or operational processes are affected.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tA Security Requirements Analysis does not begin by asking which technical systems should be installed. It first determines what needs to be protected and which level of security is appropriate.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tHow the Security Requirements Analysis Was Implemented in the Project<\/h2>
To ensure that the case study was grounded in practice rather than remaining purely theoretical, the Security Requirements Analysis for the municipal utility company was combined with an on-site assessment. The key objective was not to evaluate the existing security measures in isolation, but to compare them with the actual protection requirements of the respective sites and areas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr1-e1786637254357.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tIdentifying Assets Requiring Protection<\/h3>
The first step in a Security Requirements Analysis is to identify the relevant assets requiring protection. For the municipal utility company, this included not only buildings and technical infrastructure, but also people, information, and operational processes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tAssessing the Impact of a Security Incident<\/h3>
The second step involved assessing the potential consequences of a security incident. The analysis was not limited to burglary or theft, but also considered tampering, sabotage, information leakage, business interruption, and risks to people. This linked the Security Requirements Analysis to specific damage scenarios.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr2-246x300.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr3-e1786637599904.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tAssessing the Impact of a Security Incident<\/h3>
In the second step, the potential consequences of a security incident were assessed. The analysis covered not only burglary and theft, but also manipulation, sabotage, information leakage, business interruption, and risks to people. This linked the Security Requirements Analysis to specific damage scenarios.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tDeriving Security Zones<\/h3>Security zones can be derived from the identified protection requirements. A security zoning concept ensures the clear separation of public, semi-public, internal, and critical areas.<\/p>
The benefit is that access-control rules, physical separation, surveillance, and organizational requirements are integrated in a transparent and traceable manner.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr4-246x300.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr5-e1786637676612.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tReviewing Existing Security Measures<\/h3>
The existing security measures were then compared with the identified protection requirements. The objective was not to classify individual measures in general terms as either adequate or inadequate. The decisive factor was whether they were appropriate for the protection requirements of the respective area.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\tPrioritizing Project Findings<\/h3>The Security Requirements Analysis identified several specific areas for action. Rather than treating them as an extensive list of deficiencies, they were prioritized according to protection requirements, criticality, and implementation feasibility.<\/p>
The practical value lay in clearly identifying which measures could deliver an immediate improvement and which should be planned as part of an overarching security concept.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr6-246x300.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t![\"A](\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/09\/Nr7.png\" "\\"\\"")
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
A Security Requirements Analysis enables municipal utility companies to plan physical security in a transparent, traceable, and risk-based manner rather than relying on subjective judgement. Our project showed that many security measures were already in place, but they had not consistently been derived from an overarching security concept.<\/em><\/p> Only by assessing protection requirements, criticality, security zones, and vulnerabilities did it become clear which sites, processes, and access points required priority protection.<\/em><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t Our client, a municipal utility company, operates a wide range of site types. These include administrative and customer service facilities, water, gas, and electricity infrastructure, technical network nodes, and publicly accessible facilities.<\/p> This combination makes physical security particularly challenging. Some areas must remain accessible and customer-friendly, while others contain sensitive information, technical installations, or processes critical to the continuity of essential services. The sites are also accessed by service providers, external contractors, maintenance teams, visitors, and employees with different access requirements.<\/p> At the sites assessed during the project, a range of security measures was already in place. These included physical protection measures, locking and access systems, technical surveillance systems, and organizational procedures. However, most of these measures had evolved over time rather than being derived from a consistent, overarching security concept.<\/p> This resulted in a number of typical challenges:<\/p> The core issue was therefore not the absence of security measures<\/a>. Rather, there was no overarching benchmark against which those measures could be assessed. A Security Requirements Analysis provides precisely this benchmark.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t A Security Requirements Analysis<\/a><\/strong> is a structured process used to determine the level of protection required for specific information, processes, rooms, buildings, facilities, or sites.<\/p> The central question is:<\/p> What level of harm could result if a specific asset were compromised?<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t A Security Requirements Analysis is based on three fundamental principles. They help ensure that security requirements are assessed not only from a technical perspective, but also in terms of potential harm and impact.<\/p> This integrated approach is particularly important for a municipal utility company, as sensitive information, technical facilities, and processes essential to the continuity of public services must all be protected simultaneously.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t Confidentiality:<\/strong> Availability:<\/strong> Integrity:<\/strong> A Security Requirements Analysis does not begin by asking which technical systems should be installed. It first determines what needs to be protected and which level of security is appropriate.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t To ensure that the case study was grounded in practice rather than remaining purely theoretical, the Security Requirements Analysis for the municipal utility company was combined with an on-site assessment. The key objective was not to evaluate the existing security measures in isolation, but to compare them with the actual protection requirements of the respective sites and areas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t The first step in a Security Requirements Analysis is to identify the relevant assets requiring protection. For the municipal utility company, this included not only buildings and technical infrastructure, but also people, information, and operational processes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t The second step involved assessing the potential consequences of a security incident. The analysis was not limited to burglary or theft, but also considered tampering, sabotage, information leakage, business interruption, and risks to people. This linked the Security Requirements Analysis to specific damage scenarios.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t In the second step, the potential consequences of a security incident were assessed. The analysis covered not only burglary and theft, but also manipulation, sabotage, information leakage, business interruption, and risks to people. This linked the Security Requirements Analysis to specific damage scenarios.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t Security zones can be derived from the identified protection requirements. A security zoning concept ensures the clear separation of public, semi-public, internal, and critical areas.<\/p> The benefit is that access-control rules, physical separation, surveillance, and organizational requirements are integrated in a transparent and traceable manner.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t The existing security measures were then compared with the identified protection requirements. The objective was not to classify individual measures in general terms as either adequate or inadequate. The decisive factor was whether they were appropriate for the protection requirements of the respective area.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t The Security Requirements Analysis identified several specific areas for action. Rather than treating them as an extensive list of deficiencies, they were prioritized according to protection requirements, criticality, and implementation feasibility.<\/p> The practical value lay in clearly identifying which measures could deliver an immediate improvement and which should be planned as part of an overarching security concept.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\tFrom Legacy Security Arrangements to a Risk-Based Security Requirements Analysis<\/h2>
The 3 Core Principles of a Security Requirements Analysis<\/h2>
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
Information must be accessible only to authorized individuals. This includes, for example, site plans, key registers, operational data, alarm and notification procedures, customer data, and technical documentation.<\/p>
Essential facilities, systems, and processes must remain operational. This is particularly important for a municipal utility company, as disruptions may affect the continuity and security of supply.<\/p>
Information, facilities, and processes must not be altered or manipulated without detection. For a municipal utility company, this can be particularly critical where technical systems, control information, or operational processes are affected.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\tHow the Security Requirements Analysis Was Implemented in the Project<\/h2>
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\tIdentifying Assets Requiring Protection<\/h3>
Assessing the Impact of a Security Incident<\/h3>
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\tAssessing the Impact of a Security Incident<\/h3>
Deriving Security Zones<\/h3>
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\tReviewing Existing Security Measures<\/h3>
Prioritizing Project Findings<\/h3>
\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t