Supports wireless authentication, encryption, access control, segmentation, monitoring and rogue AP detection by ensuring that wireless encryption is governed and implemented consistently, reducing unauthorized access, network attack exposure, service disruption, and security control gaps.
Document the required control objective and scope; assign an accountable owner; define approved standards and configurations; implement the control across applicable network environments; integrate it with monitoring and change management; retain evidence; and review effectiveness periodically. For wireless encryption, protect communications using approved secure protocols and cryptographic controls.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| CIS-V8 | CIS Controls CIS Controls are a prioritized set of cybersecurit... Clause: Control 12 – Network Infrastructure Management: 12.6 – Use of Secure Network Management and Communication Protocols |
CIS
Best Practice
|
vv8 | View → |
| COBIT2019 | COBIT COBIT is an enterprise governance and management f... Clause: 4.4 – Deliver, Service and Support (DSS) > DSS05 – Managed Security Services > DSS05.02 – Manage network and connectivity security. 4.4 – Deliver, Service and Support (DSS) > DSS05 – Managed Security Services > DSS05.03 – Manage endpoint security. |
COBIT
Governance Framework
|
v2019 | View → |
| DORA | Digital Operational Resilience Act The EU Digital Operational Resilience Act establis... Clause: Article 9(4)(b) – Network and infrastructure management structure and techniques Article 9(2) – ICT security policies, procedures, protocols and tools for resilience and data security |
EU
Regulation
|
vCurrent | View → |
| GDPR | General Data Protection Regulation (GDPR) The General Data Protection Regulation is a bindin... Clause: Article 32(1)(a) – Pseudonymisation and encryption |
EU
Regulation
|
vCurrent | View → |
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §2.11-3.3 – Network Management |
India
Guideline
|
vLatest | View → |
| ISO27002 | ISO/IEC 27002 ISO/IEC 27002 is a guidance standard containing a... Clause: 8.24 – Use of cryptography |
ISO
Standard
|
v2022 | View → |
| NIS2 | NIS2 Directive The NIS2 Directive establishes EU-wide cybersecuri... Clause: Article 21(2)(a) – Policies on risk analysis and information system security |
EU
Directive
|
vCurrent | View → |
| NIST-CSF | NIST Cybersecurity Framework (CSF) The NIST Cybersecurity Framework provides high-lev... Clause: PR.IR – Technology Infrastructure Resilience | PR.IR-01 – Networks and environments are protected from unauthorized logical access and usage DE.CM – Continuous Monitoring | DE.CM-01 – Networks and network services are monitored to find potentially adverse events |
NIST
Framework
|
v2 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.1 – ACCESS CONTROL, 3.18 – SYSTEM AND COMMUNICATIONS PROTECTION; AC-18 – WIRELESS ACCESS, SC-40 – WIRELESS LINK PROTECTION |
NIST
Control Catalog
|
vRev. 5 | View → |
| NPCI-ISR | NPCI Information Security Requirements NPCI information-security requirements define cont... Clause: Security Measures / Controls; Network Security – TLS |
India
Standard
|
vLatest | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard maintaine... Clause: 1.3.3 – NSCs are installed between all wireless; 2.3.1 – For wireless environments connected to the; 2.3.2 – For wireless environments connected to the; 4.2.1.2 – Wireless networks transmitting PAN or; 11.2.1 – Authorized and unauthorized wireless access; 11.2.2 – An inventory of authorized wireless access |
PCI
Standard
|
v4 | View → |
| RBI-CSF | RBI Cyber Security Framework / Master Directions RBI cyber-security requirements and directions set... Clause: 4) Network Management and Security – 4.4 Wireless LAN/access-point/client security controls; 4) Network Management and Security – 4.5 Identify authorised hardware/mobile devices and enforce security requirements before connectivity |
India
Regulation
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 3.1 PR.AA: Identity Management, Authentication, and Access Control |
India
Regulation
|
vLatest | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: CC6.1 – Logical and Physical Access Controls – The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives. CC6.6 – Logical and Physical Access Controls – The entity implements logical access security measures to protect against threats from sources outside its system boundaries. |
AICPA
Audit Framework
|
vLatest | View → |