VLAN
What is VLAN?
Virtual Local Area Network, a logical network segment created within a physical network to isolate traffic and improve security through network segmentation.
Terms that appear alongside vlan
Each of these is named in at least one of the same controls as vlan. The number is how many controls name both.
- firewall 4 shared controls
- gateway 4 shared controls
- zero trust 3 shared controls
- microsegmentation 3 shared controls
- defense in depth 3 shared controls
- dnssec 3 shared controls
- dmz 3 shared controls
- network architecture 2 shared controls
Frameworks that govern vlan
What the standards actually require on vlan
Requirements naming vlan across 6 standards, quoted from the control text.
Switches that manage VLANs from differing security domains must not use VLAN trunking.
new-zealand-information-security-manual-nzism::22.3.9.C.04 · 22.3.9.C.04 No VLAN trunking across differing security domains →Network devices managing VLANs are administered from the most trusted security domain.
ISM-0530 · Administering VLAN devices from trusted domain →Conformance is declared through the part's PICS tables for the ISO 9506 profile, TLS with ACSE authentication, VLAN profiles, layer 2 and routable GOOSE and SMV security and SNTP, so that a device states which secured profiles it implements.
iec-62351-power-systems-communication-security::6:11 · Part 6, clause 11: conformance (general, IEC 61850-8-1 profiles, VLAN profiles, SNTP profile) with PICS tables →The bank periodically evaluates configurations and patch levels of access devices at every access point and node between data centre VLANs, LAN and WAN interfaces, its network and external networks, and interconnections with partners, vendors and service provi...
rbi-cybersecurity-framework-for-banks::103 · Para 103: periodic evaluation of access devices at VLAN, LAN/WAN, external and partner interconnections →Security Layer 1 Infrastructure per X.805 Clause 7.1: The Infrastructure Security Layer consists of network facilities (transmission facilities and network elements) protected by the security measures.
X805-Layer1-Infrastructure-Security-Transmission-Facilities-Network-Elements-Lines-Routers-Switches · ITU-T X.805 Security Layer 1 - Infrastructure Security + Transmission Facilities + Network Elements + Routers + Switches + Lines + Physical + Datacenter + Optical + Radio Access + Wireless + Wireline + Edge →Design ICS network architecture using defined zones, a demilitarised zone (DMZ) between the control network and the corporate/enterprise network, and VLAN segmentation to separate functions and contain compromise.
CISA-ICS-DID-24 · ICS Network Architecture →Questions people ask about vlan
What is VLAN?
Why is VLAN important for compliance?
Which compliance frameworks address VLAN?
Where can I learn more about VLAN?
See how VLAN applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.