WEB-02
Use of Demilitarized Zones (DMZ)
Description
Mechanisms exist to utilize a Demilitarized Zone (DMZ) to restrict inbound traffic to authorized Technology Assets, Applications and/or Services (TAAS) on certain services, protocols and ports.
Control Question
Does the organization utilize a Demilitarized Zone (DMZ) to restrict inbound traffic to authorized Technology Assets, Applications and/or Services (TAAS) on certain services, protocols and ports?
Control Metadata
Domain:
Web Security
Validation Cadence:
Annual