حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 13 بند
Network Access Control (NAC) Deployment Review
قائمة التحقق هذه باللغة الإنجليزية.
Reviews a network access control deployment covering authentication, device posture, guest and IoT handling, dynamic segmentation, and enforcement.
IEEE 802.1XNIST 800-53CIS
PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.
Authentication
- Is 802.1X authentication enforced on wired and wireless access ports? *
- Are certificate-based (EAP-TLS) methods used for managed devices where feasible?
- Is MAC Authentication Bypass (MAB) restricted and inventoried for non-802.1X devices? *
- Is the RADIUS/policy server highly available and integrated with the identity provider? *
Device Posture
- Is endpoint posture (patch level, EDR presence, disk encryption) assessed before granting access? *
- Are non-compliant devices quarantined to a remediation VLAN? *
- Is device profiling used to classify unmanaged and IoT devices? *
Guest & IoT
- Are guest devices isolated to a segregated network with captive portal onboarding? *
- Are IoT/OT devices placed in dedicated segments with least-privilege access policies? *
- Are unknown or unauthorized devices denied or restricted by default? *
Enforcement & Monitoring
- Is dynamic VLAN or SGT/ACL assignment used to enforce role-based segmentation? *
- Are NAC authentication and enforcement events logged to a SIEM? *
- Is there a documented fallback/monitor-mode process to avoid production outages during rollout?
نزّل قائمة تحقق Network Access Control (NAC) Deployment Review كاملة
احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.