Improve
Step 4 involves using the data from your intrusion detection sensors and your test data to
improve the design. An effective security policy is always a work in progress. It continues to
improve with every cycle of the process. This does not necessarily mean implementing new
hardware with every cycle. The improvement cycle could involve changing certain
organizational procedures or documenting new potential threats and vulnerabilities.
The security process is ongoing and constantly changing based on the results of evaluations
that occur as part of each step of the process.