SekitCrosswalk
ENES
Start now
Cyber Essentials · derived mapping target

CE1.3Block unauthenticated inbound traffic

Configure firewalls to deny inbound connections by default, and only open a rule when an authorised person has approved and documented the business reason for it. Remove rules once they are no longer needed.

Mapping at a glance
CE1.3Block unauthenticated inbound trafficCyber Essentials
RCF-0171Network segmentationNetwork Security · TechnicalRCF-0172Firewall managementNetwork Security · PolicyRCF-0173Firewall managementNetwork Security · ProcessRCF-0185Zero Trust network accessNetwork Security · ProcessRCF-0186Zero Trust network accessNetwork Security · Technical

CE1.3 is covered by 10 Sekit CSF controls. +5 more in the table below. Open in the full graph →

Mapped from the Sekit CSF

The Sekit controls that cover this requirement, lens by lens.

RCF-0171Network segmentation · TechnicalRCF-0172Firewall management · PolicyRCF-0173Firewall management · ProcessRCF-0185Zero Trust network access · ProcessRCF-0186Zero Trust network access · TechnicalRCF-0192Wireless security · TechnicalRCF-0232Exposure management · PolicyRCF-0233Exposure management · ProcessRCF-0291Alternate work sites · TechnicalRCF-0423Network segmentation (ICS) · Technical

ISO/IEC 27001:2022 counterparts

Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.

A.8.20 Networks securityA.8.22 Segregation of networksA.5.1 Policies for information securityA.8.8 Management of technical vulnerabilitiesA.5.9 Inventory of information and other associated assetsA.5.30 ICT readiness for business continuityA.5.18 Access rightsA.5.15 Access controlA.8.5 Secure authenticationA.6.7 Remote workingA.8.21 Security of network services

NIST CSF 2.0 counterparts

PR.AA-05 Access permissions managedPR.IR-01 Networks protected from unauthorized accessPR.AA-03 Users and devices authenticatedID.RA-01 Vulnerabilities identified and recordedID.RA-05 Inherent risk understoodID.RA-07 Changes and exceptions managedPR.IR-04 Adequate capacity maintainedRC.RP-01 Recovery plan executed

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Network architecture diagram
The drawing or schematic showing how the company's systems connect: networks, firewalls, segments, and links to the internet and the cloud.
From the Sekit evidence catalog

Related controls

Via the shared Sekit CSF topic, not the framework's own index.

CE1.1 Change default firewall credentialsCE1.2 Protect the administrative interfaceCE2.2 Change default and guessable passwordsCE4.3 Require multi-factor authentication
Ask Sekura: “What evidence proves CE1.3?”
Also via MCP, free with account