graphgrc

SCF - WEB-02 - Use of Demilitarized Zones (DMZ)

Mechanisms exist to utilize a Demilitarized Zone (DMZ) to restrict inbound traffic to authorized devices on certain services, protocols and ports.

Mapped framework controls

GDPR

ISO 27002

Control questions

Does the organization utilize a Demilitarized Zone (DMZ) to restrict inbound traffic to authorized devices on certain services, protocols and ports?