+COS-05 Networks for Administration
---+COS-05.01B
---+COS-05.02B
---+COS-05.01AC
|
1. Overview
COS-05 Networks for Administration
-
| Summary |
Standard |
|
COS-05.01B
|
There are separate networks for the administrative management of the infrastructure and for the operation of management consoles. These networks are logically or physically separated from the cloud service customer's network and protected from unauthorised access by multi-factor authentication (cf. IAM-08).
The separation can be physical or logical (e.g. VLAN, SDN, VRF).
|
|
COS-05.02B
|
Networks used by the cloud service provider to create, migrate or orchestrate compute workloads (e.g. virtual machines, containers, functions) are physically or logically separated from tenant networks.
|
|
COS-05.01AC
|
If there is no physical separation between the administration networks and other networks, the administration network traffic uses state of the art encryption (cf. CRY-01).
|
1.1 References
1.2 Identified Requirements
1.2 Related Regulation
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
|