MITRE D3FEND MITRE-D3FEND-Isolate-Tactic-Execution-Network-Isolation-Sandboxing-Microsegmentation-DNS-Filtering: MITRE D3FEND Isolate Tactic + Execution + Network Isolation + Sandboxing + Microsegmentation + DNS Filtering

What else in your programme already covers this

This control maps to 29 controls across 18 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-20 Multi-factor authentication (Essential)
ASD37-22 Network segmentation (Excellent)
ASD37-25 Software firewall - inbound (Very Good)

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

CPG-1.D Revoking Credentials for Departing Employees
CPG-8.A Network Segmentation

ISO/IEC 27011:2024 · 2 controls

27011-6.3 Awareness and Training
27011-8.2 Network security and segregation

API 1164 · 1 control

API1164-13 Business Continuity and Recovery

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-3.1 Network Segmentation

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

CAT-D3-1 Preventative controls

GLBA · 1 control

GLBA-Subordinate-Rules-Operationalisation GLBA Operationalisation through FTC Safeguards Rule, Privacy Rule, SEC Reg S-P and Banking-Agency Guidelines

HKMA SPM · 1 control

HKMA-SPM-TM-Technology-TM-G-1-CRAF-Coord HKMA SPM Technology Management Modules (TM-G-1 to TM-G-4, TM-E-1) + Coordination with C-RAF

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 1 control

IACS-UR-E26-Protect-NetworkSegmentation-Zones-Conduits-Boundary IACS UR E26 Protect Goal - Network Segmentation + Zones + Conduits + Boundary Defence + Data Diodes

IEEE 1686 · 1 control

IEEE1686-Section5.2-5.3-AuditLog-Retention-Export-Monitoring IEEE 1686 Section 5.2 + 5.3 - Audit Trail Records + Retention + Export + Supervisory Monitoring and Control + Network Security Monitoring

ISMAP (Japan) · 1 control

ISMAP-CloudInfrastructure-NetworkSegmentation-Container-Serverless-WorkloadProtection-Hardening-ConfigManagement ISMAP Cloud Infrastructure - VPC Network Segmentation + Container/Serverless Security + Cloud Workload Protection (CWPP) + Image/Template Hardening + CIS Benchmarks + Configuration Management + IaC

ISO/IEC 27010:2015 · 1 control

27010-13.1 Communications Security

India CERT-In Cyber Security Directions 2022 · 1 control

CERTIN-DC-VPS-VPN-CloudSP-CustomerKYC-SubscriberRecords-5YearRetention-Dir8to10 CERT-In Directions 8-10 Service Provider Obligations - Data Centre + Virtual Private Server + VPN Service Provider Customer KYC + Subscriber Records + 5-Year Retention After Cancellation

Laos Law on Prevention and Combating Cybercrime (2015) · 1 control

LAOS-CC-Network-Security-Information-Security-Obligations-Article-21-Service-Provider-Duties Laos Cybercrime Network Security + Information Security Obligations + Article 21 + Service Provider Duties

MITRE ATT&CK · 1 control

MITRE-ATTACK-Detection-Data-Sources-Analytics-Sigma-Splunk-KQL-Yara-Snort-SIEM-Hunt-Engineering MITRE ATT&CK Detection + Data Sources + Analytics + Sigma + SPL + KQL + Yara + Snort + SIEM + Hunt

OWASP ASVS · 1 control

OWASPASVS-9 Communication Security (V9)

US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties · 1 control

CPSC-CS.1 Network Security for Connected Products

US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements · 1 control

USSDWA-2 Cybersecurity Practices (Assessment, Access, Network, IR)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.