INFRA-17 – Network Diagram

What is this control really about?

This control is about ensuring that your organization has taken the time to map out its network and all the elements that interact with it and has kept it up to- date.

Having a visual representation of your organization network enables an auditor to confirm your scope and audit all the relevant components.

Available tools in the marketplace

The following listing is “crowdsourced” from our customer base or from external research. TrustCloud does not personally recommend any of the tools below, because we haven’t personally used them. 

Available templates

• N/A no templates available for this control

What is required to implement this control?

An up to date documented network diagram is required for this control. To document this network diagram, the following must be considered:

• Listing all the components (servers, db, routers, firewalls)
• Highlight the point of entries and exits to each component
• Maintain the diagram

What evidence is the auditor looking for?

• An up to date documented network diagram

An example of what an artifact can look like

1- An up to date documented network diagram

Source