Network topology diagrams for the enclave must be maintained and up to date at all times.

From Network Infrastructure Policy Security Technical Implementation Guide

Part of Network infrastructure is not properly documented.

Associated with: CCI-001098

SV-8532r3_rule Network topology diagrams for the enclave must be maintained and up to date at all times.

Vulnerability discussion

To assist in the management, auditing, and security of the network infrastructure facility drawings and topology maps are a necessity. Topology maps are important because they show the overall layout of the network infrastructure and where devices are physically located. They also show the relationship and interconnectivity between devices and where possible intrusive attacks could take place. Having up to date network topology diagrams will also help show what the security, traffic, and physical impact of adding a new user(s) will be on the network.

Check content

Validate the network diagram by correlating the information with all routers, multi-layer switches, and firewall configurations. Validate all subnets have been documented accordingly. Validate any connectivity documented on the diagram by physically examining the cable connections for the downstream and upstream links, as well as connections for major network components (Routers, Switches, Firewalls, IDS/IPS, etc.). If the site has not maintained network topology diagrams for the enclave, this is a finding.

Fix text

Update the enclave's network topology diagram to represent the current state of the network and its connectivity.

Pro Tips

Powered by sagemincer