What does HAE-NCF-4 require?

Access to cloud-based applications is authorised by issuing an access token, through a standardised protocol such as OAuth 2.0, to whichever user, device or service has been validated.

NIST SP 800-215 Guide to a Secure Enterprise Network...

Other controls in Section 4: Network configurations for basic security functions – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

4.1 Verify identity with phishing-resistant multi-factor authentication and decide access on risk-based contextual information
HAE-NCF-1 Manage and secure every endpoint through unified endpoint management
HAE-NCF-2 Route all user access through an enterprise-managed identity provider with phishing-resistant multi-factor authentication
HAE-NCF-3 Authenticate devices by certificate and check their health and environment
HAE-NCF-5 Give microservices networks service discovery, encryption, authentication, load balancing, observability and canary rollouts

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-215 Guide to a Secure Enterprise Network Landscape controls