New Zealand Information Security Manual (NZISM)
Chapter 14: Software security – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 14.3.10.C.02: Specify encrypted-connection allow list by domain or IP

What does 14.3.10.C.02 require?

Agencies whose gateways use an allow list to define which external addresses may receive encrypted connections should specify those entries by domain name or IP address.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 14: Software security – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls