Gather Info

Review Change
Management

Audit Firewall Physical
& OS Security

Clean Up & Optimize
Rule Base

Assess &
Remediate Risk

Repeat