SekitCrosswalk
ENES
Start free trial
Cyber Essentials · derived mapping target

CE1.2Protect the administrative interface

Do not expose the firewall's management interface to the internet unless there is a documented business need, and protect it with multi-factor authentication or an IP allow-list of trusted addresses combined with managed password authentication.

Mapping at a glance
CE1.2Protect the administrative interfaceCyber Essentials
RCF-0082Remote accessIdentity & Access Management · PolicyRCF-0084Remote accessIdentity & Access Management · TechnicalRCF-0174Firewall managementNetwork Security · TechnicalRCF-0233Exposure managementVulnerability & Configuration · ProcessRCF-0291Alternate work sitesBusiness Continuity · Technical

CE1.2 is covered by 5 Sekit CSF controls. Open in the full graph →

Mapped from the Sekit CSF

The Sekit controls that cover this requirement, lens by lens.

RCF-0082Remote access · PolicyRCF-0084Remote access · TechnicalRCF-0174Firewall management · TechnicalRCF-0233Exposure management · ProcessRCF-0291Alternate work sites · Technical

ISO/IEC 27001:2022 · Annex A controls counterparts

Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.

A.6.7 Remote workingA.8.20 Networks securityA.8.16 Monitoring activitiesA.5.9 Inventory of information and other associated assetsA.8.8 Management of technical vulnerabilitiesA.5.30 ICT readiness for business continuityA.8.24 Use of cryptographyA.5.15 Access controlA.8.5 Secure authentication

NIST CSF 2.0 counterparts

PR.AA-05 Access permissions managedPR.IR-01 Networks protected from unauthorized accessPR.IR-04 Adequate capacity maintainedRC.RP-01 Recovery plan executedID.RA-01 Vulnerabilities identified and recordedID.RA-05 Inherent risk understoodID.RA-07 Changes and exceptions managed

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

VPN and remote access configuration
How employees connect securely to company systems when working outside the office: VPN, remote-access rules and allowed devices.
From the Sekit evidence catalog

Related controls

Via the shared Sekit CSF topic, not the framework's own index.

CE1.1 Change default firewall credentialsCE1.3 Block unauthenticated inbound trafficCE4.3 Require multi-factor authentication
Ask Sekura: “What evidence proves CE1.2?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.