LexLint.ioBeta

Know the law your code answers to.

Law / Frameworks / NIST Privacy Framework / Protect-P

NIST Privacy Framework, Protect-PPR.AC-P5

Network integrity is protected (e.g., network segregation, network segmentation).NIST Privacy Framework, version 1.0, January 2020, PR.AC-P5

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .

2
laws
2
jurisdictions
0
with court rulings behind them
0
not yet in force

Related controls in other frameworks the same duties, in at least two laws we track, reach both

  • NIST CSF 2.0PR.IR-01 Networks and environments are protected from unauthorized logical access and usage, 2 laws
  • European Union
  • New York

Sector security regimes

2 laws, 2 jurisdictions
JurisdictionLawWhat it asks, as read here
European Union DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework

Develop, document and implement network security management policies that segregate and segment ICT systems and networks, document network connections and data flows, use a separate and dedicated network for the administration of ICT assets, apply network access controls, encrypt network connections, review the network architecture once a year (periodically if you are a microenterprise), and verify the adequacy of firewall rules and connection filters for ICT systems supporting critical or important functions at least every 6 months (Article 13).
New York DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment

The Department says you should consider expeditiously identifying and remediating known exploited vulnerabilities in firmware, hardware and software, especially on systems exposed to the Internet; disabling inactive or unnecessary ports and protocols where possible; establishing network access protections and segmenting networks; and reviewing and validating cloud application configurations against your risk tolerance.

Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.