+NET.1.1.A23 Separation of Network Segments (S)

NET.1.1.A23 Separation of Network Segments (S)

IT systems with different protection needs SHOULD be placed in different network segments. If this is not possible, IT systems SHOULD be protected according to the highest protection needs present in their network segment. In addition, network segments SHOULD be further divided depending on their size and the requirements of the segmentation concept in question. It MUST be ensured that it is not possible to bypass network segments, much less zones.

If the virtual LANs (VLANs) on a switch belong to different organisations, they SHOULD be physically separated. Alternatively, data SHOULD be encrypted to protect the transmitted information from unauthorised access.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.40 Denial of Service