NIST SP 800-123
Network Security

NIST SP 800-123 6: Network Security and Server Communications

Apply Section 6.3 network security including: network segmentation per NIST SP 800-207 Zero Trust + microsegmentation + DMZ + jump servers + bastion hosts + perimeter firewalls + host-based firewalls + IDS/IPS + DDoS protection + DNS security (DNSSEC + DoH) + secure email (SPF + DKIM + DMARC + ARC + BIMI) + secure file transfer (SFTP + FTPS + SCP) + secure remote access (VPN + IPsec + SD-WAN + zero trust network access ZTNA) + network monitoring + traffic analysis + flow records (NetFlow + sFlow + IPFIX).

What else in your programme already covers this

This control maps to 44 controls across 24 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

  • ASD37-20 Multi-factor authentication (Essential)
  • ASD37-22 Network segmentation (Excellent)
  • ASD37-25 Software firewall - inbound (Very Good)

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

  • CPG-1.D Revoking Credentials for Departing Employees
  • CPG-8.A Network Segmentation

ISO/IEC 27011:2024 · 2 controls

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 2 controls

API 1164 · 1 control

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

FFIEC IT Examination Handbook · 1 control

  • FFIEC-06 Network security and segmentation

IEC 62443 · 1 control

ISO 27017 · 1 control

ISO 27018 · 1 control

ISO 27019 · 1 control

ISO 27043 · 1 control

ISO 28001:2007 Supply Chain Security Management · 1 control

ISO/IEC 27010:2015 · 1 control

ISO/SAE 21434 · 1 control

NIST Privacy Framework · 1 control

  • NISTPF-5 Protect-P Access Control (PR.AC-P)

New Zealand Information Security Manual (NZISM) · 1 control

  • NZISM-5 Network Security, System Hardening, and Application Security

OWASP ASVS · 1 control

OWASP MASVS · 1 control

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

South Korea ISMS-P · 1 control

US Consumer Product Safety Commission (CPSC) - Connected Product Safety · 1 control

  • CPSC-CS.1 Network Security for Connected Products

US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements · 1 control

  • USSDWA-2 Cybersecurity Practices (Assessment, Access, Network, IR)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 44 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-123 controls