Free quiz · Appendix B of Book 7 · Local government
Score your local government network diagram
Open your current drawing, the real one. Tick each question you can answer yes. Each yes is worth 5 points.
Partly means no. "Most of it has a zone table" is a no.
Verbal knowledge doesn't count. If the answer lives in your head and not on the page, it's a no.
Check, don't remember. Look at one real device or cable and compare.
This is the local government scorecard from Book 7, Draw Secure Local Government Network Diagrams . Each book in the series has its own. Pick another industry .
Most low scores come from a drawing typed by hand that stopped matching the network. Draw the local government standard from your NetBox data with the free tool, or read the free chapter first: Municipal network zones .
What auditors check What an audit-ready network diagram includes: every security zone with a guarded edge and the device that enforces it; every connection to outside networks, wireless included; the VLANs and subnets in each zone; a flow register of what may cross each boundary, under default deny; and an owner, a date and the source it was drawn from. Score yours below: each question names the chapter that fixes it.
Who asks for it: if the police department reaches criminal justice information, the FBI CJIS Security Policy applies as your state's CJIS Systems Agency administers it. In version 5.9.5, section 5.7.1.2 asks for a current network diagram showing how the agency network connects to criminal justice information systems. Your state agency decides how it applies; the drawing shows where the boundary is.
Part 1. Pages and readers 1. Does the city have separate pages for separate readers: at least an overview, a logical page and a physical page?CHAPTER 1 2. Could the city manager read the overview and explain, in their own words, what is protected and what stops if City Hall loses power or an internet line?CHAPTER 2 3. Does every page carry a filled-in title block with the site, the date and a revision?CHAPTER 2, 13 4. Is there one legend for colors, line styles and symbols, and does every page follow it, including one color for the police zone used everywhere?CHAPTER 3, 4 Part 2. Zones and VLANs 5. Are public Wi-Fi, city staff, voice, payment counters, city servers, police, building systems, field systems and network management each in a named zone, or is the decision to combine two of them written down?CHAPTER 3 6. Does every VLAN and subnet appear in exactly one zone, with its ID and name?CHAPTER 4 7. Does every VLAN show its gateway, so a reader can tell which device routes between zones, including the police VLANs?CHAPTER 3, 4 8. Is the firewall drawn where the zones meet, with both members of the pair and a table of its interfaces and the zone each serves?CHAPTER 3, 4 9. Is every system next door drawn as a boundary with its owner (the state network and its router, county dispatch, the water plant, vendors), with either one labeled edge or the words "no connection"?CHAPTER 3, 11 Part 3. Buildings and hardware 10. Does every drawn backbone link, inside buildings and on the city fiber between them, carry the label printed on the real cable?CHAPTER 5 11. Do switch uplinks show their members, speed, media and the VLANs they carry, so you can see that the police wing carries no city or public VLAN?CHAPTER 5 12. Is everything in the data room and every closet on the page, including the closets in the library, the fire stations and the public works yard, with what each UPS powers?CHAPTER 6 13. Are the firewall pair, the switch stacks and both internet lines drawn member by member, with a page that says what the city notices when each one fails, generator included?CHAPTER 7 14. Does every SSID appear with its VLAN, zone and security, and does the public SSID say that clients can't see each other?CHAPTER 8 Part 4. Conversations and policy 15. Are flows drawn from the side that starts them, including patrol laptops, staff VPN, county dispatch and vendor support, each with its conditions?CHAPTER 9 16. Are the important denials drawn on purpose: public to anything the city owns, everyone else to the police zone, building and field systems to the internet?CHAPTER 9 17. Is there a flow register ending in a default-deny row, a zone matrix with an answer in every cell, and has it been compared with the firewall's actual rules in the last six months?CHAPTER 10, 16 Part 5. Keeping it true 18. Do the typed facts (addresses, serials, VLAN tables) come from one source of record, such as NetBox, instead of being typed into the drawing?CHAPTER 12 19. Has the drawing been checked against the real buildings in the last 90 days, with differences and unknowns kept in a dated gaps register (WS-11)?CHAPTER 13, 15 20. Could you produce, within ten minutes, a copy for a grant reviewer or the risk pool with management addresses, serials and circuit IDs removed?CHAPTER 14
Your result Tick the questions above Your tier appears here as you go.
Share your tier, not your drawing.
Network Diagrams by Industry · Book 7
Draw Secure Local Government Network Diagrams: From City Hall to CJIS Compliance
Every question names the chapter that fixes it, so every low score is a reading list.
The rest of the book: City hall, the police wing and CJIS, public Wi-Fi at the library and parks, closets in buildings you don't control, and water systems drawn as a boundary. One-time payment, 14-day refund.
Scorecards for other industries
Every book ends with a 20-question scorecard written for its own networks. Take any of them free.
Free quiz · Book 1, Appendix B
Score your plant network diagram Twenty questions written for manufacturing networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 2, Appendix B
Score your school network diagram Twenty questions written for education networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 3, Appendix B
Score your warehouse network diagram Twenty questions written for warehousing and logistics networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 4, Appendix B
Score your store network diagram Twenty questions written for retail networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 5, Appendix B
Score your office network diagram Twenty questions written for offices networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 6, Appendix B
Score your bank network diagram Twenty questions written for banks and credit unions networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 8, Appendix B
Score your hotel network diagram Twenty questions written for hotels and hospitality networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 9, Appendix B
Score your corporate network diagram Twenty questions written for corporate hq and multi-site networks, 0 to 100, with a tier you can share.
Take the quiz → Free quiz · Book 10, Appendix B
Score your dealership network diagram Twenty questions written for car dealerships networks, 0 to 100, with a tier you can share.
Take the quiz →