Skip to content

Virtual Private Network

What is Virtual Private Network?

A technology that creates an encrypted tunnel between a user's device and a remote server, protecting data in transit and masking the user's IP address.

Information Security

Frameworks that govern virtual private network

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on virtual private network

Requirements naming virtual private network across 3 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Layer 2 Services per X.805 Clause 7.2: The Services Security Layer is concerned with security of network services that service providers offer to their customers - encompasses the protection of the basic network connectivity services + supplementary v...

X805-Layer2-Services-Security-Frame-Relay-ATM-IP-VoIP-QoS-Toll-Free-IM-VPN-AAA-DNS · ITU-T X.805 Security Layer 2 - Services Security + Frame Relay + ATM + IP + VoIP + QoS + Toll-Free + Instant Messaging + VPN + AAA Authentication-Authorization-Accounting + DNS + IMS + 5G + Cellular Mobile Voice + SMS →
India CERT-In Cyber Security Directions 20221 control

Directions 8-10 impose detailed customer KYC + subscriber-records retention obligations on Data Centre + Cloud Service Provider + Virtual Private Server (VPS) + Virtual Private Network (VPN) service providers - a controversial set of provisions affecting India...

CERTIN-DC-VPS-VPN-CloudSP-CustomerKYC-SubscriberRecords-5YearRetention-Dir8to10 · CERT-In Directions 8-10 Service Provider Obligations - Data Centre + Virtual Private Server + VPN Service Provider Customer KYC + Subscriber Records + 5-Year Retention After Cancellation →
Myanmar Cybersecurity Law (2023)1 control

Comply with the Cybersecurity Law prohibitions on unauthorised Virtual Private Network (VPN) use, anonymisation tools, and circumvention software.

MMCL-3 · VPN Restrictions and Circumvention Tool Prohibitions →

Questions people ask about virtual private network

What is Virtual Private Network?
A technology that creates an encrypted tunnel between a user's device and a remote server, protecting data in transit and masking the user's IP address.
Why is Virtual Private Network important for compliance?
Virtual Private Network is a key concept in Information Security. Understanding virtual private network helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Virtual Private Network?
Virtual Private Network appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, India CERT-In Cyber Security Directions 2022, Myanmar Cybersecurity Law (2023). Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Virtual Private Network?
Explore our compliance framework pages to see how virtual private network applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Virtual Private Network applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.