Monetary Authority of Singapore Technology Risk Management Guidelines 11.2: 11.2 Network Security

The FI should install firewalls and similar devices between its network and the internet and third-party connections; segment its network by system criticality, functional role or data sensitivity against lateral movement and insider threat; deploy network intrusion prevention; implement network access control against unauthorised devices; regularly review rules on firewalls, routers, switches and access points, promptly removing obsolete rules and insecure protocols; consider isolating internet browsing from endpoints physically or logically, or equivalent controls; implement DoS protection against distributed, volumetric and application-layer attacks, optionally with a mitigation provider; and periodically review network architecture, security design and interconnections for vulnerabilities.