PR.AC-5(b)Key Measure

Network segmentation is implemented where appropriate

Protect · Access Control

Manual Attestation

Compliance Score

Not Assessed

Documentation Maturity

1/ 5

Target: 2.5

Implementation Maturity

1/ 5

Target: 2.5

Control Description

The network is segmented to isolate critical systems, guest access, and different trust levels. Lateral movement between segments is restricted.

Remediation Guidance

Separate guest WiFi from corporate network. Isolate servers in a separate VLAN. Restrict inter-VLAN routing to necessary traffic only. Consider micro-segmentation for critical systems.