DMZ
What is DMZ?
A demilitarized zone is a network segment that acts as a buffer between an organization's internal network and the external internet, hosting public-facing services.
Terms that appear alongside dmz
Each of these is named in at least one of the same controls as dmz. The number is how many controls name both.
- network segmentation 8 shared controls
- firewall 5 shared controls
- nist 5 shared controls
- zero trust 4 shared controls
- microsegmentation 4 shared controls
- remote access 4 shared controls
- remote access vpn 3 shared controls
- vlan 3 shared controls
Frameworks that govern dmz
What the standards actually require on dmz
Requirements naming dmz across 6 standards, quoted from the control text.
Set policies and procedures for segmenting the network, DMZs included, according to what equipment is involved and how sensitive it is, the roles of users and the kinds of system.
awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::SC-3 · SC-3 Network segmentation policy and DMZs →For critical information systems and DMZ systems with a customer interface, VA is done at least every six months and PT at least every 12 months; non-critical systems follow a risk-based periodicity.
rbi-cybersecurity-framework-for-banks::151 · Para 151: VA every six months and PT every 12 months for critical and DMZ customer-facing systems →Public-facing servers have protection measures, sit in a DMZ separated from the internal network behind firewalls, publish or store personal and important information only with approval under a posting procedure, and are checked periodically for exposure of im...
south-korea-isms-p::2.10.3 · Public server security →OT assets should not be directly accessible from the public internet; use jump hosts and DMZs.
CPG-2.G · Limit OT Connections to Public Internet →Design ICS network architecture using defined zones, a demilitarised zone (DMZ) between the control network and the corporate/enterprise network, and VLAN segmentation to separate functions and contain compromise.
CISA-ICS-DID-24 · ICS Network Architecture →The vulnerability assessment identifies vulnerabilities for later exploitation through basic queries on running services, including at least an external assessment of network devices and servers exposed on public IPs from which sensitive information can be rea...
gli-33-gaming-laboratories-international-event-wagering-systems::B.9.2 · B.9.2 Vulnerability Assessment →Questions people ask about dmz
What is DMZ?
Why is DMZ important for compliance?
Which compliance frameworks address DMZ?
Where can I learn more about DMZ?
See how DMZ applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.