This requirement reduces risk in cloud network security by ensuring network segmentation is defined, consistently implemented and demonstrably effective across cloud environments. It supports the organization's need to secure cloud-based assets, data and services while managing cloud-specific risk.
Implement documented controls for network segmentation within segmentation, firewalls, secure connectivity, traffic protection and network visibility. Define scope, ownership, required evidence, monitoring, review cadence and escalation criteria; automate validation where practical.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| CIS-V8 | CIS Controls CIS Controls are a prioritized set of cybersecurit... Clause: Control 13 – Network Monitoring and Defense: 13.4 – Perform Traffic Filtering Between Network Segments |
CIS
Best Practice
|
vv8 | View → |
| COBIT2019 | COBIT COBIT is an enterprise governance and management f... Clause: 4.4 – Deliver, Service and Support (DSS) > DSS05 – Managed Security Services > DSS05.02 – Manage network and connectivity security. |
COBIT
Governance Framework
|
v2019 | View → |
| DORA | Digital Operational Resilience Act The EU Digital Operational Resilience Act establis... Clause: Article 9(4)(b) – Network and infrastructure management structure and techniques |
EU
Regulation
|
vCurrent | View → |
| HIPAA | Health Insurance Portability and Accountability Act HIPAA is a U.S. federal law supported by implement... Clause: § 164.312(a)(2)(vi) Network segmentation; § 164.312(g) Standard: Transmission security |
US
Law
|
vCurrent | View → |
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §2.19-3.4.4 – Network Security |
India
Guideline
|
vLatest | View → |
| ISO27002 | ISO/IEC 27002 ISO/IEC 27002 is a guidance standard containing a... Clause: 5.23 – Information security for use of cloud services; 8.20 – Networks security |
ISO
Standard
|
v2022 | View → |
| NIS2 | NIS2 Directive The NIS2 Directive establishes EU-wide cybersecuri... Clause: Article 21(2)(a) – Policies on risk analysis and information system security |
EU
Directive
|
vCurrent | View → |
| NIST-CSF | NIST Cybersecurity Framework (CSF) The NIST Cybersecurity Framework provides high-lev... Clause: PR.IR – Technology Infrastructure Resilience | PR.IR-01 – Networks and environments are protected from unauthorized logical access and usage |
NIST
Framework
|
v2 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.18 – SYSTEM AND COMMUNICATIONS PROTECTION; SC-7 – BOUNDARY PROTECTION |
NIST
Control Catalog
|
vRev. 5 | View → |
| NPCI-ISR | NPCI Information Security Requirements NPCI information-security requirements define cont... Clause: Security Measures / Controls; Network Security – Network Segmentation |
India
Standard
|
vLatest | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard maintaine... Clause: 1.2.1 – Configuration standards for NSC rulesets are:; 1.3.1 – Inbound traffic to the CDE is restricted as; 1.4.1 – NSCs are implemented between trusted and; 1.4.4 – System components that store cardholder |
PCI
Standard
|
v4 | View → |
| RBI-CSF | RBI Cyber Security Framework / Master Directions RBI cyber-security requirements and directions set... Clause: 4) Network Management and Security – 4.10 Layered boundary defences, firewalls/proxies/DMZ/IPS/IDS and traffic filtering; 7) Patch/Vulnerability & Change Management – 7.7 Periodic evaluation of access-device configurations/patch levels and secure interconnections |
India
Regulation
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 3.3 PR.DS: Data Security |
India
Regulation
|
vLatest | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: CC6.1 – Logical and Physical Access Controls – The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives. CC6.6 – Logical and Physical Access Controls – The entity implements logical access security measures to protect against threats from sources outside its system boundaries. |
AICPA
Audit Framework
|
vLatest | View → |