+NET.1.1.A16 Specification of Network Architecture (S)

NET.1.1.A16 Specification of Network Architecture (S)

Based on the security policy and the requirements specification at hand, an architecture for a network's zones (including the internal network, DMZ, and external connections) SHOULD be developed and consistently maintained. In this context, all the relevant architectural elements of the respective organisation SHOULD be taken into account based on its specific situation. The following, however, are necessary at minimum:

  • the architecture of the internal network, including specifications on how network virtualisation technologies, layer 2 and layer 3 communication, and redundancy procedures are to be used
  • the network architecture for external connections, including firewall architectures, DMZ and extranet design, and specifications for site coupling
  • specifications of the network locations where security components such as firewalls or IDS/IPS should be placed and the security functions they should provide
  • specifications for the network connections of the different IT systems at hand
  • the network architecture in virtualisation hosts, with a particular focus on network virtualisation overlays (NVOs) and the architecture in vertically integrated systems (ViS)
  • specification of the basic architecture elements for a private cloud, as well as protection of the connections to virtual private clouds, hybrid clouds, and public clouds
  • architecture for secure administration and monitoring of IT infrastructure

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations