5.7.3.3
Establish Basic Perimeter Defenses
Activation of Software Firewalls-Host
Establish Basic Perimeter Defenses – Activation of Software Firewalls-Host – The organization shall activate any software firewalls included on devices within their networks or document the alternative measures in place instead of these firewalls.
-
8.1 User Endpoint Devices: Protect information stored, processed, or accessible through user endpoint devices.
8.3 Information Access Restriction: Limit access to information and associated assets according to the established topic-specific access control policy.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.16 Monitoring Activities: Monitor networks, systems, and applications for unusual behavior and take appropriate actions to assess potential information security incidents.
8.20 Network Security: Secure, manage, and control networks and network devices to safeguard information in systems and applications.
8.21 Security of Network Services: Identify, implement, and monitor security mechanisms, service levels, and service requirements for network services.
-
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.5.4 Employ replay-resistant authentication mechanisms for network access to privileged and nonprivileged accounts.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.
-
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.5.4 Employ replay-resistant authentication mechanisms for network access to privileged and nonprivileged accounts.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.