Requirement
In addition to Subcontrols in the ECC control 2-5-3, the CSP shall cover the following additional Subcontrols for cybersecurity requirements for networks security management requirements, as a minimum:
Sub-Controls
2-4-P-1-1
Requirement: Monitoring of traffic across the external and internal networks to detect anomalies.
2-4-P-1-2
Requirement: Network isolation and protection of Cloud Technology Stack network from other internal and external networks.
2-4-P-1-3
Requirement: Protection from denial-of-service attacks (including Distributed Denial of Service (DDoS)).
2-4-P-1-4
Requirement: Protection of data transmitted through the network; from and to the Cloud Technology Stack network using cryptography primitives; for management and administrative access.
2-4-P-1-5
Requirement: Access control between different network segments.
2-4-P-1-6
Requirement: Isolation between cloud service delivery network, cloud management network and CSP enterprise network.
References
- ECC – 2:2024 equivalent: 2-5-3
