Has your organization implemented network segmentation to isolate internal networks from external networks, with controls that restrict inbound traffic to only necessary communications?

Network segmentation creates boundaries between different parts of your network, limiting the ability of attackers to move laterally if they gain access. By restricting inbound traffic from external networks to only what is necessary for business operations, you reduce the attack surface and potential entry points for threats. This includes implementing technologies like firewalls, access control lists, and DMZs to create security zones.

Evidence of compliance could include network architecture diagrams showing segmentation, firewall rule documentation that demonstrates restricted external access, or results from a network segmentation test that validates the effectiveness of the controls.