NIST SP 800-215 Guide to a Secure Enterprise Network Landscape
Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

NIST SP 800-215 Guide to a Secure Enterprise Network Landscape 3.4.1: Monitor the whole network for visibility, configuration drift and incident response feeds

What does 3.4.1 require?

Network monitoring and observability tools gather data across the entire network into a dashboard of topology, connections and operating parameters; they identify the interfaces that provisioning code must invoke; they measure drift, the unauthorised or ad hoc configuration changes that alter performance and security parameters despite infrastructure as code, and alert for correction; they feed centralised management tools that build secure overlays such as virtual segmentation on top of a provider's native segmentation; and they generate the alerts and threat intelligence the security operations centre handles, increasingly through security orchestration, automation and response.

Maintained by Gerard Blokdyk

Other controls in Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.