NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices MD124-CTL-06: Network Security for Mobile

What else in your programme already covers this

This control maps to 77 controls across 49 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-20 Multi-factor authentication (Essential)
ASD37-22 Network segmentation (Excellent)
ASD37-25 Software firewall - inbound (Very Good)

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

CPG-1.D Revoking Credentials for Departing Employees
CPG-8.A Network Segmentation

ISO/IEC 27011:2024 · 2 controls

27011-6.3 Awareness and Training
27011-8.2 Network security and segregation

API 1164 · 1 control

API1164-13 Business Continuity and Recovery

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-3.1 Network Segmentation

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

CAT-D3-1 Preventative controls

FFIEC IT Examination Handbook · 1 control

FFIEC-06 Network security and segmentation

IEC 62443 · 1 control

IEC62443-13 Network security monitoring

ISO 28001:2007 Supply Chain Security Management · 1 control

ISO28001-PS-01 Facility Security

ISO/IEC 27010:2015 · 1 control

27010-13.1 Communications Security

ISO/IEC 27019:2024 · 1 control

ISO27019-13 Network security monitoring

ISO/IEC 27043:2015 · 1 control

ISO27043-27 Network security management

ISO/SAE 21434 · 1 control

ISO21434-27 Network security management

MITRE ATT&CK · 1 control

MITRE-ATTACK-Detection-Data-Sources-Analytics-Sigma-Splunk-KQL-Yara-Snort-SIEM-Hunt-Engineering MITRE ATT&CK Detection + Data Sources + Analytics + Sigma + SPL + KQL + Yara + Snort + SIEM + Hunt

MTCS (Singapore) · 1 control

MTCS-Incident-Business-Continuity-CSC-Data-Protection-72-Hour-Notification-BCP-DR-PDPA MTCS Incident + Business Continuity + CSC Data Protection + 72-Hour Notification + BCP + DR + PDPA

Myanmar Cybersecurity Law (2023) · 1 control

MMCL-5 Content Moderation, Removal Requests, and Lawful Access

NERC CIP · 1 control

NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010)

NIST Privacy Framework · 1 control

NISTPF-5 Protect-P Access Control (PR.AC-P)

NIST SP 1800-32 · 1 control

NIST1800-32-13 Network security monitoring

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material

NIST SP 800-123 · 1 control

NISTSP123-6 Network Security and Server Communications

NIST SP 800-137 · 1 control

NISTSP137-6 Malware, Identity Access, and Network Boundary Monitoring

NIST SP 800-144 · 1 control

NISTSP144-2 Cloud Architecture, Service Selection, and Tenant Isolation

NIST SP 800-145 · 1 control

NISTSP145-6 Deployment Model Classification (Private, Community, Public, Hybrid)

NIST SP 800-146 · 1 control

NISTSP146-4 IaaS Operational Recommendations and Workload Hardening

NIST SP 800-190 · 1 control

NIST190-16 Virtual network segmentation

NIST SP 800-61 Rev. 3 · 1 control

NISTSP61-4 Detection and Analysis: Sources, Triage, Categorisation, Prioritisation

NIST SP 800-63-4 · 1 control

NISTSP63R4-5 Federation: Assertions, Trust Agreements, RP Validation, Pseudonymous Identifiers

NIST SP 800-88 · 1 control

NISTSP88-8 Cloud-Resident Data, Hosted Storage, and Scope Boundaries

NIST SP 800-92 · 1 control

NISTSP92-3 Log Infrastructure: Architecture, Centralisation, Transport Security, SIEM Governance

New Zealand Information Security Manual (NZISM) · 1 control

NZISM-5 Network Security, System Hardening, and Application Security

O-RAN WG11 Security Specification · 1 control

ORANWG11-2 O-RAN Interface Security: E2, A1, O1, O2, Open Fronthaul

OSFI B-13 · 1 control

OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery

OWASP SAMM · 1 control

OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management

Oman National Cybersecurity Framework · 1 control

OMANCS-5 Network, Endpoint, System Development, and Configuration Security

Open Banking Security · 1 control

OPENBANK-3 Mutual TLS, Token Binding, Request Signing (JWS), Key Management

OpenSSF Scorecard · 1 control

OSSFSC-3 Build, CI/CD Security, Workflow Permissions, Dangerous Patterns

PCI P2PE · 1 control

PCI-P2PE-06 Network security and segmentation

PCI PIN Security · 1 control

PCI-PIN-06 Network security and segmentation

PCI SSF · 1 control

PCI-SSF-06 Network security and segmentation

PSD2 SCA · 1 control

PSDTWO-1 Strong Customer Authentication (SCA) Core Requirements

PTES · 1 control

PTESPHASE-4 Vulnerability Analysis

SIG (Shared Assessments) · 1 control

SHAREASSESS-4 Vulnerability Management, Patching, Application Security

SLSA · 1 control

SUPCHAIN-3 Dependency Verification and SBOM

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

IM8-SEC.3 Network Security

South Korea ISMS-P · 1 control

ISMSP-AC-04 Network Access Control

TISAX - Trusted Information Security Assessment Exchange · 1 control

TISAX-TECH-03 Operations and Communications Security

TSA Pipeline Cybersecurity Directives · 1 control

TSAPIPE-2 OT/IT Network Segmentation and Access Control

US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties · 1 control

CPSC-CS.1 Network Security for Connected Products

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.