NIST SP 800-215 Guide to a Secure Enterprise Network Landscape
Section 6: Secure wide area network infrastructure – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

NIST SP 800-215 Guide to a Secure Enterprise Network Landscape 6.2b: Adopt a multi-cloud networking platform with common visibility, common ingress and egress policy, end-to-end encryption and automation

What does 6.2b require?

Where the enterprise connects to several cloud providers, its networking platform delivers common operational visibility and control across the providers' differing native constructs by abstracting them behind APIs with added high-availability, security and visibility features; applies one shared security policy for ingress and egress to application environments across clouds; enables end-to-end encryption inside the cloud and high-performance encryption from the data centre to the cloud; and supports automated deployment and configuration, typically through an abstraction layer fed by observability tools and a virtual network configuration per provider defined with infrastructure as code plug-ins.

Maintained by Gerard Blokdyk

Other controls in Section 6: Secure wide area network infrastructure – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.