Skip to content

Network Access Control

What is Network Access Control?

Security solutions that enforce policies to control which devices and users can access a network, based on identity, device health, and compliance status.

Information Security

Each of these is named in at least one of the same controls as network access control. The number is how many controls name both.

What the standards actually require on network access control

Requirements naming network access control across 6 standards, quoted from the control text.

Establishes information security as an integral part of NAC, so that access to the network is regulated by identity-dependent authorisation rules and the information processed, stored and transmitted over networks is protected.

bsi-it-grundschutz::NET.3.4 · NET.3.4 Network Access Control (Network Access Control) →
IEC 624431 control

The asset owner shall control access within the IACS network, so that only authorized devices connect and only authorized traffic flows between zones.

iec-62443::NET 1.6 · Internal network access control →

Discloses the device's ability to authenticate communication partners: whether it provides or supports node authentication so that sender and recipient are known to each other and authorised to receive the information (for example web APIs, SMTP, SNMP) (NAUT-1...

mds2-medical-device::NAUT · NAUT Node authentication: disclose mutual authentication of communicating nodes, network access control and certificate use →

For CONFIDENTIAL, SECRET and TOP SECRET systems, agencies must apply network access controls to every network.

new-zealand-information-security-manual-nzism::18.1.13.C.01 · 18.1.13.C.01 Network access controls on all classified networks →

Network access controls are implemented on networks to prevent the connection of unauthorised network devices and networked IT equipment.

ISM-0520 · Blocking unauthorised network devices →

Only authorised devices are allowed onto the network, enforced by controlling device connections, for example with network access control.

australian-energy-sector-cyber-security-framework-aescsf::ARCHITECTURE-2k · ARCHITECTURE-2k: Only authorised devices can connect →

Questions people ask about network access control

What is Network Access Control?
Security solutions that enforce policies to control which devices and users can access a network, based on identity, device health, and compliance status.
Why is Network Access Control important for compliance?
Network Access Control is a key concept in Information Security. Understanding network access control helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Network Access Control?
Network Access Control appears in the requirement text of BSI IT-Grundschutz, IEC 62443, MDS2 (Medical Device), New Zealand Information Security Manual (NZISM), Australian Information Security Manual. Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Network Access Control?
Explore our compliance framework pages to see how network access control applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Network Access Control applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.