Cyber Essentials · derived mapping target
CE1.2Protect the administrative interface
Do not expose the firewall's management interface to the internet unless there is a documented business need, and protect it with multi-factor authentication or an IP allow-list of trusted addresses combined with managed password authentication.
Mapping at a glance
CE1.2Protect the administrative interfaceCyber Essentials
CE1.2 is covered by 5 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0082Remote access · PolicyRCF-0084Remote access · TechnicalRCF-0174Firewall management · TechnicalRCF-0233Exposure management · ProcessRCF-0291Alternate work sites · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
NIST CSF 2.0 counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
VPN and remote access configuration
How employees connect securely to company systems when working outside the office: VPN, remote-access rules and allowed devices.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves CE1.2?”
Also via MCP, free with account