1. Explain how technical controls are essential in enforcing policy for many IT functions that do not involve direct human control.

2. Explain that access control is the method by which systems determine whether and how to admit a user into a trusted area of the organization.

3. Explain how a firewall prevents specific types of information from moving between an external network, known as the untrusted network, and an internal network, known as the trusted network.

4. Discuss how the firewall may be a separate computer system, a software service running on an existing router or server, or a separate network containing a number of supporting devices.