NIST SP 800-215 Guide to a Secure Enterprise Network Landscape
Section 5: Enterprise-wide network security framework, zero trust network access – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

NIST SP 800-215 Guide to a Secure Enterprise Network Landscape 5.2: Apply software-defined perimeter principles: hide resources until authorised, re-evaluate continuously, prevent lateral movement

What does 5.2 require?

Access is defined logically and dynamically per user and per request rather than by address groups or VLANs: all resources (ports, workloads, applications) stay invisible until the user is authenticated and authorised, and only a connection to the allowed resources is established, following least privilege; the access level is re-evaluated continuously during the session and recalibrated as context changes; and lateral movement is prevented through microsegmentation, shrinking the attack surface, which secures the east-west traffic that now dominates.

Maintained by Gerard Blokdyk

Other controls in Section 5: Enterprise-wide network security framework, zero trust network access – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-215 Guide to a Secure Enterprise Network Landscape controls