graphgrc

SCF - NET-04 - Data Flow Enforcement – Access Control Lists (ACLs)

Mechanisms exist to design, implement and review firewall and router configurations to restrict connections between untrusted networks and internal systems.

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization design, implement and review firewall and router configurations to restrict connections between untrusted networks and internal systems?