Network Security Architecture and Zoning Standard

When to use this

Use this standard to document network zones, trust boundaries, sensitive traffic paths, management networks, public exposure, and virtual/cloud network scope.

Related controls

• A.8.20 Networks Security
• A.8.9 Configuration Management
• A.8.16 Monitoring Activities
• Risk Assessment

Network zones

Required architecture checks

• Current topology diagram exists.
• Sensitive traffic paths are identified.
• Public network exposure is documented.
• Administrative and management networks are identified.
• Backup and disaster recovery network paths are identified.
• Virtual/cloud networks are included.
• Zone boundary controls are defined.
• Monitoring and logging are defined per zone.