Skip to content

NAT

What is NAT?

Network Address Translation, a method of remapping IP addresses to enable multiple devices to share a single public IP address, providing a layer of obscurity.

Information Security

Frameworks that govern nat

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on nat

Requirements naming nat across 3 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications3 controls

Security Layer 1 Infrastructure per X.805 Clause 7.1: The Infrastructure Security Layer consists of network facilities (transmission facilities and network elements) protected by the security measures.

X805-Layer1-Infrastructure-Security-Transmission-Facilities-Network-Elements-Lines-Routers-Switches · ITU-T X.805 Security Layer 1 - Infrastructure Security + Transmission Facilities + Network Elements + Routers + Switches + Lines + Physical + Datacenter + Optical + Radio Access + Wireless + Wireline + Edge →
IATA Operational Safety Audit (IOSA) Standards Manual2 controls

All fleet aircraft carry the systems and equipment needed for the routes and airspace of intended operation including PBN, MNPS or NAT HLA, RVSM, ETOPS/EDTO, ADS-B and CPDLC as applicable, and pressurised aircraft flown above 10,000 feet have guidance ensuring...

iata-operational-safety-audit-iosa-standards-manual::FLT 4.3 · FLT 4.3 Aircraft Systems and Equipment Specifications →
Vietnam Law on Cybersecurity (No. 116/2025/QH15)1 control

Enterprises must identify the IP addresses of organisations and individuals using Internet services and provide identification information to the specialised force.

vietnam-law-on-cybersecurity-no-1162025qh15::VNCS-41-IP · Identify the IP addresses of service users and keep 12 months of IP assignment logs for the specialised force →

Questions people ask about nat

What is NAT?
Network Address Translation, a method of remapping IP addresses to enable multiple devices to share a single public IP address, providing a layer of obscurity.
Why is NAT important for compliance?
NAT is a key concept in Information Security. Understanding nat helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address NAT?
NAT appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, IATA Operational Safety Audit (IOSA) Standards Manual, Vietnam Law on Cybersecurity (No. 116/2025/QH15). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about NAT?
Explore our compliance framework pages to see how nat applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how NAT applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.