NIST SP 800-190
NIST SP 800-190: Cloud Infrastructure Security

NIST SP 800-190 NIST190-16: Virtual network segmentation

Virtual network segmentation. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Cloud Infrastructure Security.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 67 controls across 39 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • ASD37-20 Multi-factor authentication (Essential)
  • ASD37-22 Network segmentation (Excellent)
  • ASD37-25 Software firewall - inbound (Very Good)
  • CPG-1.D Revoking Credentials for Departing Employees
  • CPG-8.A Network Segmentation

ISO/IEC 27011:2024 · 2 controls

  • 27011-6.3 Awareness and Training
  • 27011-8.2 Network security and segregation

API 1164 · 1 control

  • API1164-13 Business Continuity and Recovery
  • CAT-D3-1 Preventative controls
  • FFIEC-06 Network security and segmentation

IEC 62443 · 1 control

  • IEC62443-13 Network security monitoring
  • ISO28001-PS-01 Facility Security

ISO/IEC 27010:2015 · 1 control

  • 27010-13.1 Communications Security

ISO/IEC 27019:2024 · 1 control

  • ISO27019-13 Network security monitoring

ISO/IEC 27043:2015 · 1 control

  • ISO27043-27 Network security management

ISO/SAE 21434 · 1 control

  • ISO21434-27 Network security management
  • NISTPF-5 Protect-P Access Control (PR.AC-P)

NIST SP 1800-32 · 1 control

  • NISTSP61-4 Detection and Analysis: Sources, Triage, Categorisation, Prioritisation

NIST SP 800-63-4 · 1 control

  • NISTSP63R4-5 Federation: Assertions, Trust Agreements, RP Validation, Pseudonymous Identifiers

NIST SP 800-88 · 1 control

  • NISTSP88-8 Cloud-Resident Data, Hosted Storage, and Scope Boundaries

NIST SP 800-92 · 1 control

  • NISTSP92-3 Log Infrastructure: Architecture, Centralisation, Transport Security, SIEM Governance
  • NZISM-5 Network Security, System Hardening, and Application Security
  • ORANWG11-2 O-RAN Interface Security: E2, A1, O1, O2, Open Fronthaul

OSFI B-13 · 1 control

  • OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery

OWASP SAMM · 1 control

  • OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management
  • OMANCS-5 Network, Endpoint, System Development, and Configuration Security
  • OPENBANK-3 Mutual TLS, Token Binding, Request Signing (JWS), Key Management

OpenSSF Scorecard · 1 control

  • OSSFSC-3 Build, CI/CD Security, Workflow Permissions, Dangerous Patterns

PCI P2PE · 1 control

  • PCI-P2PE-06 Network security and segmentation

PCI PIN Security · 1 control

  • PCI-PIN-06 Network security and segmentation

PCI SSF · 1 control

  • PCI-SSF-06 Network security and segmentation

PSD2 SCA · 1 control

  • PSDTWO-1 Strong Customer Authentication (SCA) Core Requirements

PTES · 1 control

  • PTESPHASE-4 Vulnerability Analysis
  • SHAREASSESS-4 Vulnerability Management, Patching, Application Security

SLSA · 1 control

  • SUPCHAIN-3 Dependency Verification and SBOM

South Korea ISMS-P · 1 control

  • ISMSP-AC-04 Network Access Control
  • TSAPIPE-2 OT/IT Network Segmentation and Access Control
  • CPSC-CS.1 Network Security for Connected Products

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in NIST SP 800-190: Cloud Infrastructure Security

Query this from an agent

The graph holds this control, the 67 it maps to, and the evidence behind each claim, over MCP and REST.