SCF - AST-04 - Network Diagrams & Data Flow Diagrams (DFDs)
Mechanisms exist to maintain network architecture diagrams that:
- Contain sufficient detail to assess the security of the network’s architecture;
- Reflect the current architecture of the network environment; and
- Document all sensitive/regulated data flows.
Mapped framework controls
GDPR
- Art 30.1
- Art 30.2
- Art 30.3
- Art 30.4
- Art 30.5
ISO 27002
NIST 800-53
SOC 2
Control questions
Does the organization maintain network architecture diagrams that:
- Contain sufficient detail to assess the security of the network’s architecture;
- Reflect the current architecture of the network environment; and
- Document all sensitive/regulated data flows?