of success Description of operating processes Assumptions and/or dependencies Review and/or reflection Often CoIs span similar organizations (e.g., DoD, particularly when there is a common interest in an outcome). Individual members may be expected to: Support the CoP through participation and review/validation of products Attempt to wear the "one hat" associated with the CoP while maintaining the integrity and autonomy of their individual organizations. Participate voluntarily with the blessing of their organizations that determine their level of participation and investment. Security mechanisms COI security requirements can range in sophistication from simple network file shares to an interconnection of physically separate sites that are connected via dedicated communication circuits. COI security mechanisms and the respective basic characteristics are identified in the Table. These security mechanisms may be utilized individually and in combinations to provide the requisite security for each COI. COI architecture can overlay the existing LAN or WAN architecture in order to maximize the use of existing resources and to provide the required COI separation in the most efficient manner. COIs that require additional dedicated physical resources (e.g., dedicated router, VPN and firewalls devices) are usually more complex in nature and expensive to operate because of the added network devices and the personnel to operate and manage them. They also add the benefit of more security utilizing the defense in depth approach. A COI does not necessarily imply a physical separation of the infrastructure, but can do so. Construction A standard approach to COI segregation can be through the use of group policies if the LAN or WAN infrastructure utilizes the Microsoft Windows operating system utilizing the Active Directory service. Additional dedicated COI boundary security components such as a router, VPN, firewall, and IDS can be provided depending upon the requirement needs of a COI. COIs can be designed and deployed by employing the security mechanisms that are listed in the Table. Typically each individual COI may have unique characteristics and requirements. The security mechanisms listed above are the basic building blocks in the construction of all COIs. See also Computer security policy National security policy, military strategy Network security policy Policy Security engineering Separation of mechanism and policy References Security