Cybersecurity can’t start at the firewall if the network underneath is a mess....

https://zulu-wiki.win/index.php/How_to_Align_Network_Infrastructure_Work_with_ACSC_Guidance

Cybersecurity can’t start at the firewall if the network underneath is a mess. A damaged patch lead can cause VPN handshakes to fail, while an overlooked switch with default credentials can give an intruder a path across the network