When to use this
Use this matrix to document network zones and approved traffic between them.
Related controls
- A.8.22 Segregation of Networks
- A.8.20 Networks Security
- Network Security Architecture and Zoning Standard
Zone matrix
| Source zone | Destination zone | Service/port | Business purpose | Security control | Approved by | Review date | Notes |
|---|---|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | Firewall / ACL / security group / other | TBD | TBD | TBD |
Minimum checks
- Zone owner identified.
- Allowed flows are specific.
- Broad rules are justified.
- Sensitive paths are monitored.
- Rules are reviewed periodically.
- Template
- Iso27001
- Technological controls
- Network segregation
- Zoning
Note Metadata
Aliases: Network Zone Matrix
Source: 90 Templates/Network Zone and Connection Matrix.md
Related Notes
- A.8.22 Audit Evidence Pack
- ISO 27001 A.8.20 - Networks Security
- ISO 27001 A.8.22 - Segregation of Networks
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Guide
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- ISO 27002 Annex A Control Interpretation Map
- A.8.22 Audit Checklist
- Network Security Architecture and Zoning Standard
- Network Segmentation Test Checklist
- Templates MOC