NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

NIST SP 800-215 Guide to a Secure Enterprise Network Landscape NSAT-HLM-2: Automation tools minimise human intervention in security remediation

What does NSAT-HLM-2 require?

The tools are chosen for the remediation they can perform automatically, because human-driven remediation is slow and error-prone; the more remediation is built in, the better.

Maintained by Gerard Blokdyk

Other controls in Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

3.1 Broker cloud access to find shadow IT and enforce data, threat and configuration policy in the clouds used
3.2 Deploy firewalls with the feature set the landscape needs, at the edge, inside the data centre and on devices
3.3 Use integrated appliance sets where single-console convergence fits the need
3.4.1 Monitor the whole network for visibility, configuration drift and incident response feeds
3.4.2 Provision network infrastructure as code through audited pipelines, test it and correct drift
NSAT-HLM-1 Automation tools scale to DevSecOps volume and integrate into CI/CD pipelines
NSAT-HLM-3 Automation tools provide advanced threat intelligence, real-time prevention and sandboxing
NSAT-HLM-4 Automation tools match current events to past ones and reuse their remediation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-215 Guide to a Secure Enterprise Network Landscape controls