The first layer of the multi-layered security plan is the user domain. The user domain consists of the people who access the companies information systems. The first thing that should be set up in the User Domain is some type of acceptable use policy. The next domain is the workstation domain. The workstation domain is where the employees of the company connect to the network infrastructure. In this domain there needs to be multiple layers of defense. Your main defense here will be passwords but it should also have other login techniques such as biometrics or authenticators. The LAN domain will be your companies physical infrastructure. In this domain the system administrator should keep track of all user accounts and their corresponding rights. In the LAN-to-WAN domain you have many security options are available such as Intrusion detection systems, intrusion prevention systems, and email content-filtering. The WAN domain includes both physical networking components and logical parts of communication systems. The main goal for this domain is to allow users the most access possible while making sure what goes in and out is safe and secure. The remote access domain is what allows users within the company to remotely connect to the network. A few ways to secure this domain is VPN routers and firewalls, and to use Secure Socket Layer. The last layer is the system/application domain. This domain is one of the most critical parts of the security plan and encompasses all major parts of the company’s infrastructure such as servers and even the critical data stored on them. To protect this domain you need to secure the physical access to computer rooms, and should have a disaster recovery plan, just in case something goes