ISO 27701:2019 6.10.1: Network security management

What else in your programme already covers this

This control maps to 78 controls across 24 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

PCI DSS 4.0 · 9 controls

1.1.1 1.1.1 Requirement 1 policies and procedures governed
1.2.1 1.2.1 Ruleset configuration standards for NSCs
1.2.3 1.2.3 Accurate network diagram of CDE connections
1.2.5 1.2.5 Allowed services, protocols and ports justified
1.2.7 1.2.7 Six-monthly review of NSC configurations
1.3.1 1.3.1 Inbound CDE traffic restricted
1.4.1 1.4.1 NSCs between trusted and untrusted networks
1.4.2 1.4.2 Restricting traffic entering trusted networks from outside
1.4.4 1.4.4 Cardholder data stores not reachable from untrusted networks

CIS Controls v8 · 8 controls

CIS-12.2 Establish and Maintain a Secure Network Architecture
CIS-12.3 Securely Manage Network Infrastructure
CIS-12.6 Use of Secure Network Management and Communication Protocols
CIS-12.7 Ensure Remote Devices Utilize a VPN and are Connecting to an Enterprise’s AAA Infrastructure
CIS-13.4 Perform Traffic Filtering Between Network Segments
CIS-13.9 Deploy Port-Level Access Control
CIS-4.4 Implement and Manage a Firewall on Servers
CIS-4.6 Securely Manage Enterprise Assets and Software

NIST SP 800-53 Rev 5 · 8 controls

NIST800-AC-17 AC-17 Remote Access
NIST800-AC-18 AC-18 Wireless Access
NIST800-SC-1 SC-1 Policy and Procedures
NIST800-SC-22 SC-22 Architecture and Provisioning for Name/Address Resolution Service
NIST800-SC-3 SC-3 Security Function Isolation
NIST800-SC-40 SC-40 Wireless Link Protection
NIST800-SC-7 SC-7 Boundary Protection
SP800-53-SC System and Communications Protection Family

CMMC 2.0 · 6 controls

AC.L2-3.1.13 Remote Access Confidentiality
AC.L2-3.1.14 Remote Access Routing
AC.L2-3.1.20 External Connections
SC.L2-3.13.1 Boundary Protection
SC.L2-3.13.5 Public-Access System Separation
SC.L2-3.13.6 Network Communication by Exception

HIPAA Security Rule · 5 controls

164.308(a)(1)(ii)(A) Risk Analysis (Required)
164.308(a)(1)(ii)(B) Risk Management (Required)
164.308(a)(4)(ii)(A) Isolating Health Care Clearinghouse Functions (Required if applicable)
164.312(b) Audit Controls (Standard)
164.312(e)(1) Transmission Security (Standard)

NIST SP 800-66 Rev 2 · 5 controls

164.308(a)(1)(ii)(A) Risk Analysis (Required)
164.308(a)(1)(ii)(B) Risk Management (Required)
164.308(a)(4)(ii)(A) Isolating Health Care Clearinghouse Functions (Required if applicable)
164.312(b) Audit Controls (Standard)
164.312(e)(1) Transmission Security (Standard)

Azure Security Benchmark · 4 controls

ASBv3-NS-8 Detect and disable insecure services and protocols
NS-1 Establish network segmentation boundaries
NS-2 Secure cloud services with network controls
NS-3 Deploy firewall at the edge of enterprise network

FedRAMP High · 4 controls

AC-4 Information Flow Enforcement
SC-7 Boundary Protection
SC-7(3) Access Points
SC-8 Transmission Confidentiality and Integrity

FedRAMP Moderate · 4 controls

AC-4 Information Flow Enforcement
SC-7 Boundary Protection
SC-7(3) Access Points
SC-8 Transmission Confidentiality and Integrity

C5 (Germany) · 3 controls

C5-COS-02 Security requirements for connections in the Cloud Service Provider's network
C5-COS-03 Monitoring of connections in the Cloud Service Provider's network
C5-COS-06 Segregation of data traffic in jointly used network environments

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-IVS-03 Network Security
CCM-IVS-06 Segmentation and Segregation
CCM-IVS-09 Network Defense

ISO 27001:2022 · 3 controls

8.20 Networks security
8.21 Security of network services
8.22 Segregation of networks

AWS Well-Architected Security Pillar · 2 controls

SEC05-BP01 Create network layers
SEC05-BP02 Control traffic flow within your network layers

ISO 27002:2022 · 2 controls

8.20 Networks security
8.21 Security of network services

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events
NIST-CSF-PR.IR-01 Networks and environments are protected from unauthorized logical access and usage

NIST SP 800-171 Rev 3 · 2 controls

03.13.01 Boundary Protection
03.13.06 Network Communications - Deny by Default - Allow by Exception

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-IS-2 Secure the network and systems within the data environment

Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct · 1 control

BMA-24 Network Security Management

ISO/IEC 27043:2015 · 1 control

ISO27043-27 Network security management

NIST SP 800-161 Rev 1 · 1 control

161R1-SC-7 Boundary Protection

SOC 2 · 1 control

SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of ISO 27701:2019 have you already done?

ISO 27701:2019 6.10.1 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27701:2019 your existing evidence covers. Hold SOC 2 and 58 of 108 ISO 27701:2019 controls already carry evidence.

If you hold SOC 253.7% covered · 50 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.147.2% covered · 57 gaps If you hold NIST Cybersecurity Framework 2.047.2% covered · 57 gaps If you hold ISO 27001:202243.5% covered · 61 gaps If you hold Australia Consumer Data Right - Banking (CDR)35.2% covered · 70 gaps If you hold C5 (Germany)34.3% covered · 71 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 289 were rejected on the SOC 2 pair alone.

See the released pairs, $299 each Browse the graph free