Network infrastructure and systems supporting the test and development environment must be managed from a management network.

From Test and Development Zone D Security Technical Implementation Guide

Part of ENTD0040 - The test and development infrastructure is not managed through management network.

Associated with IA controls: ECSC-1

SV-51292r1_rule Network infrastructure and systems supporting the test and development environment must be managed from a management network.

Vulnerability discussion

It is important to restrict administrative access to the supporting network infrastructure and systems in the test and development environment, as it reduces the risk of data theft or interception from an attacker on the operational network.

Check content

Review the network diagrams to determine whether a management network has been established to manage the network infrastructure and systems supporting the test and development environment. If a management network has not been established to manage the test and development environment infrastructure, this is a finding.

Fix text

Engineer a management network solution and document it within the test and development network diagrams.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.