Apply intrusion prevention (physical or logical separation) at connections between external networks (open networks, remote access) and internal networks, and on data exchange between them; inspect and update network device settings (firewall rules, ports, protocols) regularly and when environments change, allowing only necessary traffic; protect network security through dedicated lines and encryption; implement authentication and access control for wireless LAN; and limit and manage systems reachable by remote access for telework and vendor maintenance (session timeouts, user authentication, logging including content), using MFA or encrypted connections for critical systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.