graphgrc

SCF - NET-04.1 - Deny Traffic by Default & Allow Traffic by Exception

Mechanisms exist to configure firewall and router configurations to deny network traffic by default and allow network traffic by exception (e.g., deny all, permit by exception).

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization configure firewall and router configurations to deny network traffic by default and allow network traffic by exception (e?g?, deny all, permit by exception)?