Skip to content

Air Gap

What is Air Gap?

A security measure that physically isolates a computer or network from unsecured networks, including the internet. Air-gapped systems are used in high-security environments to prevent remote cyber attacks.

Information Security

Frameworks that govern air gap

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on air gap

Requirements naming air gap across 2 standards, quoted from the control text.

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems1 control

UR E26 Goal 2 (Protect) requires network segmentation following IEC 62443 zones and conduits model. Ship networks must be segmented into zones based on criticality + function: Untrusted (internet + crew internet + guest networks);

IACS-UR-E26-Protect-NetworkSegmentation-Zones-Conduits-Boundary · IACS UR E26 Protect Goal - Network Segmentation + Zones + Conduits + Boundary Defence + Data Diodes →
IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2)1 control

Protect is the second of five functional elements per MSC-FAL.1/Circ.3/Rev.2. Activities include: (1) Access Control - identity and access management for IT + OT systems + role-based access + least privilege + privileged access management (PAM) for OT engineer...

IMO-MSC-FAL-Protect-AccessControl-NetworkSegmentation-MalwareDefence-Patch-Awareness-DataSecurity · IMO MSC-FAL Protect Function - Access Control + Network Segmentation + Malware Defence + Patch Management + Awareness Training + Data Security + Crew BYOD + Removable Media →

Questions people ask about air gap

What is Air Gap?
A security measure that physically isolates a computer or network from unsecured networks, including the internet. Air-gapped systems are used in high-security environments to prevent remote cyber attacks.
Why is Air Gap important for compliance?
Air Gap is a key concept in Information Security. Understanding air gap helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Air Gap?
Air Gap appears in the requirement text of IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems, IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2). Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Air Gap?
Explore our compliance framework pages to see how air gap applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Air Gap applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.