Communications and control networks are protected from Cybersecurity Fundamentals framework

SAMMY UI is optimized for resolutions with a width 1024px and higher.

Maturity Level 1

Maturity Level 3

PR.PT-4.1

PR.PT-4.1: Web and e-mail filters shall be installed and used.

E-mail filters should detect malicious e-mails, and filtering should be configured based on the type of message attachments so that files of the specified types are automatically processed (e.g. deleted).
Web-filters should notify the user if a website may contain malware and potentially preventing users from accessing that website.

Description

Web and e-mail filters shall be installed and used.

PR.PT-4.2

PR.PT-4.2: The organization shall control the information flows/data flows within its critical systems and between interconnected systems.

Consider the following:
Information flow may be supported, for example, by labelling or colouring physical connectors as an aid to manual hook-up.
Inspection of message content may enforce information flow policy. For example, a message containing a command to an actuator may not be permitted to flow between the control network and any other network.
Physical addresses (e.g., a serial port) may be implicitly or explicitly associated with labels or attributes (e.g., hardware I/O address). Manual methods are typically static. Label or attribute policy mechanisms may be implemented in hardware, firmware, and software that controls or has device access, such as device drivers and communications controllers.

Description

The organization shall control the information flows/data flows within its critical systems and between interconnected systems.

PR.PT-4.3

PR.PT-4.3: The organization shall manage the interface for external communication services by establishing a traffic flow policy, protecting the confidentiality and integrity of the information being transmitted; This includes the review and documenting of each exception to the traffic flow policy.

Description

The organization shall manage the interface for external communication services by establishing a traffic flow policy, protecting the confidentiality and integrity of the information being transmitted; This includes the review and documenting of each exception to the traffic flow policy.