Imagine you are a security consultant tasked with assessing the security of a mid$-$sized enterprise The company uses a combination of Windows and GNU$/$Linux systems and has recently transitioned to using containerisation for several of their critical applications

c$)$ Outline the steps you would take to assess the security needs of this company Mention specific tools or methods you would use that were discussed in the Operating System Security' sections of this module, considering Windows and containerised GNU$/$Linux systems $[6$ marks$]$

d$)$ Propose a high$-$level, user$-$oriented security framework for this enterprise, ensuring you include elements of both network and operating system security. The framework should make specific recommendations for how users make use of computer systems on the network