INFRA-17 Network Diagram

What is INFRA-17 Network Diagram Control about?

Network diagram control is about ensuring that your organization has taken the time to map out its network and the elements that interact with it and has kept it up-to-date.

Having a visual representation of your organization’s network enables an auditor to confirm your scope and audit all the relevant components.

Available tools in the marketplace

The following listing is “crowdsourced” from our customer base or from external research. TrustCloud does not personally recommend any of the tools below, as we haven’t personally used them.

Tools

LucidChart

SmartDraw

Available templates

• N/A: No templates are available for this control

Control implementation

An up-to-date, documented network diagram is required for this control. To document this network diagram, the following must be considered:

1. Listing all the components (servers, databases, routers, and firewalls)
2. Highlight the points of entry and exit for each component.
3. Maintain the diagram.

What evidence is the auditor looking for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. An up-to-date, documented network diagram

An example of what an artifact can look like

For the suggested action, an example is provided below:

1. An up-to-date documented network diagram
   Google Source