Sekit CSF · Family
Network Security
24 controls in 8 topics, each seen through the policy, process and technical lenses.
Policy
RCF-0178Email security4 mappingsFormal controls are required to protect against phishing, spoofing and malicious email contentRCF-0172Firewall management5 mappingsFormal policies govern which network traffic is permitted and how firewall rules are created and reviewedRCF-0169Network segmentation4 mappingsThe company formally divides its network into zones to limit the spread of threats between systemsRCF-0175Secure DNS4 mappingsThe company formally requires that domain name resolution is protected against manipulation and abuseRCF-0181TLS termination/hardening4 mappingsThe company formally requires that encrypted communications use strong protocols and current cipher suitesRCF-0187VPN management4 mappingsRemote network access through virtual private networks is formally governed and restricted to approved users and devicesRCF-0190Wireless security4 mappingsThe company formally defines security requirements for all wireless networks it operates or permitsRCF-0184Zero Trust network access5 mappingsThe company formally adopts the principle that no user or device is trusted by default regardless of network location
Process
RCF-0179Email security4 mappingsEmail security controls are consistently maintained and suspicious emails are investigated and reportedRCF-0173Firewall management5 mappingsFirewall rules are consistently reviewed and unused or overly permissive rules are removedRCF-0170Network segmentation4 mappingsNetwork zones are consistently maintained and traffic between them is controlled and reviewedRCF-0176Secure DNS4 mappingsDNS configurations are consistently reviewed and DNS traffic is monitored for malicious activityRCF-0182TLS termination/hardening4 mappingsTLS configurations are consistently reviewed and weak protocols or ciphers are disabledRCF-0188VPN management4 mappingsVPN access is consistently provisioned, reviewed and removed when no longer requiredRCF-0191Wireless security5 mappingsWireless networks are consistently configured to security standards and unauthorised access points are identifiedRCF-0185Zero Trust network access6 mappingsZero trust access principles are consistently applied and all access requests are verified before being granted
Technical
RCF-0180Email security4 mappingsTechnical tools enforce SPF, DKIM, DMARC and scan incoming email for malicious links and attachmentsRCF-0174Firewall management6 mappingsTechnical tools manage firewall rule sets and alert on changes or rules that conflict with security policyRCF-0171Network segmentation5 mappingsTechnical controls enforce network boundaries and restrict traffic between zones based on policyRCF-0177Secure DNS4 mappingsTechnical controls implement DNS filtering, DNSSEC and monitoring to detect and block malicious domainsRCF-0183TLS termination/hardening4 mappingsTechnical controls enforce TLS version and cipher standards across all services and flag non-compliant endpointsRCF-0189VPN management7 mappingsTechnical controls enforce authentication, encryption and access policy for all VPN connectionsRCF-0192Wireless security6 mappingsTechnical controls enforce wireless encryption, segment guest networks and detect rogue access pointsRCF-0186Zero Trust network access7 mappingsTechnical controls enforce continuous verification of identity and device health before granting network access
This family in ISO/IEC 27001:2022
Every framework item the family's controls map to, most-connected first — grouped by Sekit CSF family, never by the framework's own index.
This family in NIST CSF 2.0
This family in Cyber Essentials
Ask Sekura: “What evidence proves Network Security?”
Also via MCP, free with account