NIST SP 800-215 Guide to a Secure Enterprise Network Landscape
Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

NIST SP 800-215 Guide to a Secure Enterprise Network Landscape 3.4.2: Provision network infrastructure as code through audited pipelines, test it and correct drift

What does 3.4.2 require?

Network infrastructure (with compute and storage) is described in code held in a repository and deployed and upgraded through a defined pipeline workflow, which gives tight version control so that unauthorised devices and configuration changes cannot open vulnerabilities, a uniform infrastructure across development, test, staging and production, built-in audit of every configuration change to demonstrate policy and regulatory compliance, and consistent policy across all cloud services through testing of the generated code; drift between the declared and the operational infrastructure is monitored and corrected, and provider plug-ins tailor provisioning and observability to each cloud subscribed to.

Maintained by Gerard Blokdyk

Other controls in Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.