GRC Keamanan Siber 13 butir
ZTNA / SASE Deployment Assessment
Daftar periksa ini dalam bahasa Inggris.
Assesses a Zero Trust Network Access and SASE deployment covering identity-based access, policy enforcement, converged security services, and legacy VPN replacement.
NIST 800-207NIST 800-53CSA
PDF atau Word gratis · masukkan email Anda untuk mengunduh.
Zero Trust Access Foundations
- Is access granted per-application rather than by broad network access? *
- Is every access request authenticated and authorized based on identity and context? *
- Are internal applications cloaked from the public internet (no inbound exposure)? *
- Is device posture evaluated as part of the access decision? *
Policy & Enforcement
- Are least-privilege, context-aware access policies defined per application and role? *
- Is continuous session evaluation used to re-check trust during a session?
- Is the policy decision point integrated with the identity provider and MFA? *
Converged SASE Services
- Are secure web gateway (SWG) and cloud firewall services applied to internet-bound traffic? *
- Is CASB/DLP integrated within the SASE stack for data protection?
- Is traffic routed through geographically appropriate points of presence for performance?
Migration & Monitoring
- Is there a documented plan to retire legacy VPN as ZTNA coverage expands? *
- Are access logs centralized and forwarded to the SIEM? *
- Is user experience and access failure monitored to avoid business disruption?
Unduh daftar periksa ZTNA / SASE Deployment Assessment lengkap
Dapatkan secara gratis sebagai PDF yang rapi dan siap cetak atau dokumen Word yang dapat diedit.