Does your organization maintain and document baseline communication and data flow patterns for all infrastructure-as-a-service (IaaS) environments?

Maintaining baselines of communication and data flows helps identify abnormal patterns that could indicate security incidents or unauthorized access within your IaaS environments. These baselines should document expected network traffic patterns, data transfer volumes, API calls, and service-to-service communications across your cloud infrastructure.

Evidence could include network flow diagrams, data flow documentation, baseline configuration documents, or outputs from cloud monitoring tools that show established normal patterns of communication. Cloud provider console screenshots showing configured VPC flow logs, traffic mirroring, or network monitoring tools would also serve as appropriate evidence.