5.7.3.5
Establish Basic Perimeter Defenses
Secure Wi-Fi
Establish Basic Perimeter Defenses – Secure Wi-Fi – Section 5.5 Password Requirements – The organization shall use secure Wi-Fi, at a minimum WPA2-AES, preferably WPA2-Enterprise or WPA3-Enterprise, following password requirements in section 5.5.
-
8.3 Information Access Restriction: Limit access to information and associated assets according to the established topic-specific access control policy.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.16 Monitoring Activities: Monitor networks, systems, and applications for unusual behavior and take appropriate actions to assess potential information security incidents.
8.20 Network Security: Secure, manage, and control networks and network devices to safeguard information in systems and applications.
8.21 Security of Network Services: Identify, implement, and monitor security mechanisms, service levels, and service requirements for network services.
-
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.
-
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.