Free quiz · Appendix B of Book 8 · Hotels and hospitality
Score your hotel network diagram
Open your current drawing, the real one. Tick each question you can answer yes. Each yes is worth 5 points.
Partly means no. "Most of it has a zone table" is a no.Verbal knowledge doesn't count. If the answer lives in your head and not on the page, it's a no.Check, don't remember. Look at one real device or cable and compare.This is the hotels and hospitality scorecard from Book 8, Draw Secure Hotel Network Diagrams Pick another industry .
Most low scores come from a drawing typed by hand that stopped matching the network. Draw the hotel standard from your NetBox data with the free tool, or read the free chapter first: Hotel network zones .
What auditors check What an audit-ready network diagram includes: every security zone with a guarded edge and the device that enforces it; every connection to outside networks, wireless included; the VLANs and subnets in each zone; a flow register of what may cross each boundary, under default deny; and an owner, a date and the source it was drawn from. Score yours below: each question names the chapter that fixes it.
What the assessor checks: PCI DSS v4.0.1 requirement 1.2.3 asks for an accurate network diagram showing all connections between the cardholder data environment (CDE) and other networks, including any wireless networks, so guest Wi-Fi and the payment zone must be visibly apart on the drawing. Requirement 1.2.4 adds a data-flow diagram of where card data goes.
Part 1. Pages and readers 1. Do you have separate pages for separate readers: at least an overview, a logical page and a physical page, each saying who it is for?CHAPTER 1 2. Could the general manager read the overview and say, in their own words, where the hotel takes cards, what guests can touch and what stops when the internet goes?CHAPTER 2 3. Does every page carry a title block with the property code, the current brand, the date and a revision, filled in?CHAPTER 0, 2 4. Is there one legend for colors, line styles and bands, and does every page follow it?CHAPTER 3, 4 Part 2. Zones and VLANs 5. Are payments, hotel operations, property servers, voice, guests, events, room technology, building systems, safety and network management each drawn in a named zone (or is the decision to combine two of them written down)?CHAPTER 3 6. Does every VLAN appear in exactly one zone, with its ID, name, subnet and gateway, including the guest VLANs whose gateway isn't the firewall?CHAPTER 4 7. Are the event VLANs drawn as a pool, with the rule that one event can't see another?CHAPTER 4, 8 8. Is the firewall drawn where the zones meet, with every member of the pair and a table of its interfaces and the zone each one serves?CHAPTER 3, 4 9. Is every box the hotel doesn't own drawn with its owner and its zone: the brand's router, the guest gateway, the TV head-end, the lock gateways, the controls contractor's equipment?CHAPTER 3, 11 Part 3. The building 10. Does every drawn backbone link carry the label printed on the real cable, and does every floor uplink show all its members?CHAPTER 5 11. Is there a riser view (or a table) showing every floor closet, what's in it and how it reaches the MDF?CHAPTER 5 12. Are the plant room's networked controllers drawn, each with an owner, a custodian and a criticality, and is every way in from outside (contractor VPN, cellular modem, vendor cloud) drawn as a line?CHAPTER 6 13. Is there a failover page that says, in front-desk words, what happens when an internet line, a firewall, a floor uplink, the power or the cloud PMS fails, including how keys get cut?CHAPTER 7 14. Does every SSID appear with its VLAN, zone and security, and does the guest SSID say that guests can't see each other?CHAPTER 8 Part 4. Conversations and policy 15. Are the PMS interface conversations drawn (post to room, keys, phones, TV, Wi-Fi login), each from the side that starts it, with its port or condition?CHAPTER 9 16. Are the important denials drawn on purpose: guests and events to anything internal, every other zone to payments, building systems to the internet?CHAPTER 9, 10 17. Is there a flow register with a default-deny row and a zone matrix with an answer in every cell, and has it been compared to the firewall's actual rules in the last twelve months?CHAPTER 10, 16 Part 5. Keeping it true 18. Do the typed facts (addresses, serials, VLAN tables) come from one source of record, such as NetBox, instead of being typed into the drawing?CHAPTER 12 19. Has the drawing been checked against the property since the last renovation, reflag or 90 days (whichever came last), with the differences in a dated gaps register (WS-11)?CHAPTER 13, 15 20. Could you send the brand, a vendor or a buyer's due diligence team a version with management IPs, serials and circuit IDs removed, within ten minutes?CHAPTER 14 Your result Tick the questions above Your tier appears here as you go.
Share your tier, not your drawing.
Network Diagrams by Industry · Book 8
Draw Secure Hotel Network Diagrams: From Guest Room to Boiler Room
Every question names the chapter that fixes it, so every low score is a reading list.
The rest of the book: Front desk, restaurant and spa payments, guest and conference Wi-Fi, door locks and building systems, and the owner, brand and management company split. One-time payment, 14-day refund.
Scorecards for other industries
Every book ends with a 20-question scorecard written for its own networks. Take any of them free.
Free quiz · Book 1, Appendix B
Score your plant network diagram Twenty questions written for manufacturing networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 2, Appendix B
Score your school network diagram Twenty questions written for education networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 3, Appendix B
Score your warehouse network diagram Twenty questions written for warehousing and logistics networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 4, Appendix B
Score your store network diagram Twenty questions written for retail networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 5, Appendix B
Score your office network diagram Twenty questions written for offices networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 6, Appendix B
Score your bank network diagram Twenty questions written for banks and credit unions networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 7, Appendix B
Score your local government network diagram Twenty questions written for local government networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 9, Appendix B
Score your corporate network diagram Twenty questions written for corporate hq and multi-site networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 10, Appendix B
Score your dealership network diagram Twenty questions written for car dealerships networks, 0 to 100, with a tier you can share.
Take the quiz →