Scope Enterprise Active

Network Security

To secure the organization's network infrastructure and prevent unauthorized access.

Domain ID
DOM-010
Domain Code
NET
Business Owner
Network Security

Domain Overview

NET · Full Domain Profile
Short Overview

Establishes the processes for securing network infrastructure, controlling network communications, and protecting against network-based threats.

Description

Focuses on securing the network architecture, including segmentation, firewalls, secure remote access, and network monitoring.

Why This Domain Matters

Traditional perimeter-based security models are obsolete, requiring a shift to Zero Trust architectures that continuously verify every access request.

Business Objectives

    Business Risks

      Common Challenges

        Key Capabilities

        Stakeholders, Industries & Technologies

        NET · Operating Context

        Typical Stakeholders

        Applicable Industries

        Applicable Technologies

        Keywords & Tags

        Associated Controls Catalog

        8 Active Controls in Domain
        Control ID Control Name Category & Type Criticality Status Requirements Action
        NET-001 Secure Network Architecture Establishes secure network architecture...
        Technical
        Detective
        		 Critical Active 📋 10 Reqs View →
        NET-002 Network Segmentation & Traffic Control Establishes network segmentation, securi...
        Technical
        Detective
        		 Critical Active 📋 10 Reqs View →
        NET-003 Intrusion Detection & Prevention Establishes intrusion detection and prev...
        Technical
        Detective
        		 Critical Active 📋 10 Reqs View →
        NET-004 Network Access Control (NAC) Establishes Network Access Control for d...
        Technical
        Detective
        		 Critical Active 📋 10 Reqs View →
        NET-005 Secure Remote Access Establishes secure remote access includi...
        Technical
        Detective
        		 Critical Active 📋 10 Reqs View →
        NET-006 Wireless Network Security Establishes wireless network security in...
        Technical
        Detective
        		 High Active 📋 10 Reqs View →
        NET-007 Network Monitoring & Visibility Establishes network monitoring and visib...
        Technical
        Corrective
        		 High Active 📋 10 Reqs View →
        NET-008 Voice & Video Communication Security Establishes security controls for voice,...
        Technical
        Detective
        		 High Active 📋 10 Reqs View →

        Compliance Requirements & Audit Crosswalk

        80 Specific Audit Clauses

        The following requirements dictate specific audit evidence criteria and testing steps mapped directly under the controls of this domain.

        REQUIREMENT ID REQUIREMENT TITLE & DETAILS MAPPED CONTROL TYPICAL OWNER ACTION
        NET-001-R001 Secure Network Architecture The organization shall establish a secur... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R002 Network Security Design The organization shall develop and maint... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R003 Network Trust Boundaries The organization shall define network tr... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R004 Network Security Zones The organization shall define and implem... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R005 Network Architecture Standards The organization shall define network ar... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R006 Architecture Risk Assessment The organization shall conduct regular r... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R007 Architecture Monitoring The organization shall monitor network a... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R008 Architecture Reporting The organization shall report on network... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R009 Architecture Review The organization shall conduct periodic... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-001-R010 Architecture Continuous Improvement The organization shall drive ongoing enh... NET-001 Secure Network Architecture Network Security Architecture / Network Engineering View ↗
        NET-002-R001 Segmentation Framework The organization shall establish a netwo... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R002 Network Zone Management The organization shall manage network se... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R003 Firewall Rule Management The organization shall manage firewall r... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R004 Traffic Control Policies The organization shall define and implem... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R005 Critical Asset Isolation The organization shall implement isolati... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R006 Segmentation Validation The organization shall validate network... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R007 Traffic Monitoring The organization shall monitor network t... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R008 Segmentation Reporting The organization shall report on network... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R009 Segmentation Review The organization shall conduct periodic... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-002-R010 Segmentation Continuous Improvement The organization shall drive ongoing enh... NET-002 Network Segmentation & Traffic... Network Security / Network Engineering View ↗
        NET-003-R001 Detection Framework The organization shall establish an intr... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R002 Detection Coverage The organization shall ensure intrusion... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R003 Threat Detection Rules The organization shall establish and mai... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R004 Intrusion Prevention The organization shall implement intrusi... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R005 Alert Management The organization shall manage alerts gen... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R006 Detection Monitoring The organization shall monitor intrusion... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R007 Detection Validation The organization shall validate intrusio... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R008 Detection Reporting The organization shall report on intrusi... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R009 Detection Review The organization shall conduct periodic... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-003-R010 Detection Continuous Improvement The organization shall drive ongoing enh... NET-003 Intrusion Detection & Preventi... Security Operations / Network Security View ↗
        NET-004-R001 NAC Framework The organization shall establish a Netwo... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R002 Device Authentication The organization shall authenticate devi... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R003 Device Authorization The organization shall authorize network... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R004 Device Compliance Assessment The organization shall assess the compli... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R005 Guest Network Access The organization shall provide guest net... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R006 Access Enforcement The organization shall implement enforce... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R007 NAC Monitoring The organization shall monitor Network A... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R008 NAC Reporting The organization shall report on Network... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R009 NAC Review The organization shall conduct periodic... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-004-R010 NAC Continuous Improvement The organization shall drive ongoing enh... NET-004 Network Access Control (NAC) Network Security / IAM View ↗
        NET-005-R001 Remote Access Framework The organization shall establish a secur... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R002 Remote User Authentication The organization shall authenticate user... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R003 Remote Access Authorization The organization shall authorize remote... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R004 Secure Communication Channels The organization shall establish secure... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R005 Third-Party Remote Access The organization shall manage remote acc... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R006 Remote Session Monitoring The organization shall monitor remote ac... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R007 Remote Access Logging The organization shall maintain comprehe... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R008 Remote Access Reporting The organization shall report on remote... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R009 Remote Access Review The organization shall conduct periodic... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-005-R010 Remote Access Continuous Improvement The organization shall drive ongoing enh... NET-005 Secure Remote Access Network Security / IAM View ↗
        NET-006-R001 Wireless Security Framework The organization shall establish a wirel... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R002 Wireless Authentication The organization shall authenticate user... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R003 Wireless Encryption The organization shall implement encrypt... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R004 Wireless Access Control The organization shall implement access... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R005 Wireless Network Segmentation The organization shall segment wireless... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R006 Wireless Monitoring The organization shall monitor wireless... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R007 Rogue Access Point Detection The organization shall detect rogue acce... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R008 Wireless Reporting The organization shall report on wireles... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R009 Wireless Review The organization shall conduct periodic... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-006-R010 Wireless Continuous Improvement The organization shall drive ongoing enh... NET-006 Wireless Network Security Network Security / Infrastructure View ↗
        NET-007-R001 Network Monitoring Framework The organization shall establish a netwo... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R002 Network Telemetry Collection The organization shall collect network t... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R003 Traffic Visibility The organization shall ensure comprehens... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R004 Anomaly Detection The organization shall detect network an... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R005 Network Performance Monitoring The organization shall monitor network p... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R006 Network Event Correlation The organization shall correlate network... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R007 Network Alert Management The organization shall manage alerts gen... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R008 Network Reporting The organization shall report on network... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R009 Network Review The organization shall conduct periodic... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-007-R010 Network Continuous Improvement The organization shall drive ongoing enh... NET-007 Network Monitoring & Visibilit... Network Security / SOC View ↗
        NET-008-R001 Communication Security Framework The organization shall establish a voice... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R002 Voice & Video Authentication The organization shall authenticate user... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R003 Communication Encryption The organization shall implement encrypt... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R004 Communication Access Control The organization shall implement access... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R005 Communication Session Protection The organization shall protect voice and... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R006 Communication Monitoring The organization shall monitor voice and... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R007 Communication Incident Management The organization shall manage security i... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R008 Communication Reporting The organization shall report on voice a... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R009 Communication Review The organization shall conduct periodic... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗
        NET-008-R010 Communication Continuous Improvement The organization shall drive ongoing enh... NET-008 Voice & Video Communication Se... Network Security / Collaboration Services View ↗

        Cross-Mapped Regulatory Frameworks

        Harmonized Control Mappings
        Framework Code Framework Name & Description Family / Category Version Action
        MAPPED NIST SP 800-207 (Zero Trust) Crosswalk regulatory baseline mapped under ASPIA UCL. Standard Baseline —
        NIST-CSF NIST CSF (PR.DS-2) The NIST Cybersecurity Framework provide...
        NIST
        Framework
        		 v2 View →
        MAPPED ISO 27001 (Clause A.13) Crosswalk regulatory baseline mapped under ASPIA UCL. Standard Baseline —
        PCI-DSS PCI DSS PCI DSS is an industry security standard...
        PCI
        Standard
        		 v4 View →
        COBIT2019 COBIT (APO13) COBIT is an enterprise governance and ma...
        COBIT
        Governance Framework
        		 v2019 View →
        MAPPED NIST SP 800-41 Crosswalk regulatory baseline mapped under ASPIA UCL. Standard Baseline —