Intermediate control principles for infrastructure protection control (required, with baseline, of an AI whose inherent risk is medium). A risk-based solution with the internet hosting provider (for example smart content delivery) mitigates disruptive attacks such as DDoS; guest wireless is physically separated from internal networks, wireless environments have perimeter firewalls, and wireless encryption keys change frequently; the enterprise network is segmented into separate trust zones with defence in depth (logical segmentation, hard backups, air-gapping); remote access to all administrative consoles, including restricted virtual systems, is secured; anti-spoofing blocks forged source addresses; critical systems on legacy technology are reviewed for vulnerabilities, upgrades or added defences, and controls for unsupported systems are implemented and tested.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.