flowchart TD A["Phase 1: Discovery & Assessment"] --> B["Phase 2: Design & Planning"] B --> C["Phase 3: Validation & Review"] C --> D["Phase 4: Guidance & Support"] subgraph A [Phase 1 Details] A1["Current State Analysis"] A2["Requirement Gathering"] A3["Stakeholder Interviews"] A4["Gap Analysis"] end subgraph B [Phase 2 Details] B1["Architecture Design"] B2["Technical Specifications"] B3["Implementation Roadmap"] B4["Security Framework"] end subgraph C [Phase 3 Details] C1["Solution Validation"] C2["Risk Assessment"] C3["Stakeholder Alignment"] C4["Compliance Check"] end subgraph D [Phase 4 Details] D1["Implementation Advisory"] D2["Vendor Coordination"] D3["Change Management"] D4["Performance Monitoring"] end

flowchart LR Internet --> FW["Firewall Cluster"] FW --> IDS["Intrusion Detection System"] IDS --> LB["Load Balancer"] LB --> DMZ["DMZ Zone"] LB --> Internal subgraph DMZ [DMZ Zone] direction TB Web["Web Servers"] Proxy["Reverse Proxy"] API["API Gateway"] end subgraph Internal [Internal Network] direction TB Core["Core Switch"] Core --> Servers Core --> Users subgraph Servers [Server Zone] direction LR App["Application Servers"] DB[("Database Cluster")] AD["Active Directory"] end subgraph Users [User Zone] direction LR LAN["Wired Users"] WLAN["Wireless Users"] Remote["Remote Access VPN"] end end Internal --> SIEM["SIEM & Monitoring"] SIEM --> SOC["Security Operations Center"] style FW fill:#FFE6E6 style IDS fill:#FFF0E6 style DMZ fill:#E6F7FF style Internal fill:#F0FFF0 style SIEM fill:#F5F0FF

graph TB Governance["Governance Layer
Board & Executive Committee"] Strategy["Strategy Layer
Cybersecurity Strategy & Policies"] Operations["Operations Layer
Security Operations & Management"] Technical["Technical Layer
Security Controls & Technologies"] Governance --> Strategy Strategy --> Operations Operations --> Technical subgraph Governance G1["Risk Appetite"] G2["Compliance Requirements"] G3["Resource Allocation"] G4["Oversight & Reporting"] end subgraph Strategy S1["Security Policies"] S2["Standards & Procedures"] S3["Architecture Framework"] S4["Awareness Program"] end subgraph Operations O1["Incident Response"] O2["Vulnerability Management"] O3["Access Management"] O4["Continuous Monitoring"] end subgraph Technical T1["Preventive Controls
Firewalls, Encryption"] T2["Detective Controls
IDS, SIEM"] T3["Corrective Controls
Backup, Patching"] T4["Deterrent Controls
Logging, Auditing"] end Compliance["Regulatory Compliance
NCA, ISO 27001, CITC"] -.-> Strategy RiskMgmt["Risk Management
Assessment & Treatment"] -.-> Operations