ID.AM-03.125
Does your organization maintain documented baselines of expected network communication patterns and data flows for both wired and wireless networks?
Explanation
Network baselines document normal communication patterns and data flows, enabling the detection of anomalies that could indicate security incidents. These baselines should include information about expected traffic volumes, protocols, source/destination pairs, and timing patterns for both wired and wireless networks. Evidence could include network diagrams showing expected data flows, baseline documentation of normal network traffic patterns, outputs from network monitoring tools showing established baselines, or network traffic analysis reports that reference established baselines.
Implementation Example
Maintain baselines of communication and data flows within the organization's wired and wireless networks
ID: ID.AM-03.125
Context
- Function
- ID: IDENTIFY
- Category
- ID.AM: Asset Management
- Sub-Category
- Representations of the organization's authorized network communication and internal and external network data flows are maintained

