Lesson 3.2 — Sites, networks and internet connections

This lesson helps the learner identify where in-scope networks are used, whether each organisational site has its own internet connection, how sites connect to each other where they do not, and how to produce a clear list of in-scope networks without including unnecessary technical details.

CE questionnaire questions: A2.3 A2.3.1 A2.3.2 A2.4

What You'll Be Able to Do

By the end of this lesson, you will be able to:

  • confirm whether in-scope networks are used only at previously listed company locations
  • identify additional sites where in-scope networks are used
  • explain site connectivity
  • prepare a clear network register for the Cyber Essentials assessment.

Why This Matters

The most common problems are:

  • forgetting a site that has an in-scope network;
  • including home-worker addresses in A2.3;
  • saying every site has internet without checking;
  • giving a vague answer when sites are connected through VPN, SD-WAN or a central firewall;

The Core Rule

A2.3 checks whether the in-scope networks are used at the company locations already provided.

A2.3 does not include home or remote-worker addresses.

Common Mistakes

  • forgetting a site that has an in-scope network;
  • including home-worker addresses in A2.3;
  • saying every site has internet without checking;
  • giving a vague answer when sites are connected through VPN, SD-WAN or a central firewall;
  • listing IP addresses in A2.4;
  • listing networks with no name, location or purpose;

Copy This

Work through the workbook activity for this lesson. Each question maps directly to the CE questionnaire.

Quick Checklist

Before moving on, make sure you can say yes to these:

  • [ ] What does A2.3 ask?
  • [ ] Should home-worker addresses be included in A2.3?
  • [ ] What does A2.3.1 ask?
  • [ ] When does A2.3.2 apply?
  • [ ] What should an A2.3.2 answer explain?

Your Action

Do this now — it takes 10–20 minutes.

List every office location and every internet connection in scope. Include ISP name and connection type. Add to Section A2.

Key Takeaway

This lesson produces the network and site register that later supports the firewall module.

Your Workbook Activity

Complete: Network and site register

This covers questionnaire questions: A2.3 A2.3.1 A2.3.2 A2.4

Next Lesson

In the next lesson: Home and remote workers: counting them and explaining how they connect