Establish and maintain a networks and firewalls metrics management program

Status: Live

The organization will establish and maintain a networks and firewalls metrics management program. [UCF ID 02082]

Supporting and supported controls

This control directly supports:

Technical measurement metrics [UCF Control ID 01655]

This control has the following supporting controls:

Report on the percentage of workstation firewalls, host firewalls, sub-network firewalls, and perimeter firewalls configured in accordance with policy [UCF Control ID 02116]

Report on the percentage of data transmission facilities (telecom closets/housings) in the organization that have restricted access to authorized users [UCF Control ID 02148]

Report on the percentage of systems running restricted protocols [UCF Control ID 02155]

Report on the percentage of remote access points used to gain unauthorized access [UCF Control ID 04572]

Authority documents complied with:

CISWG Information Security Program Elements, January 10,2005, ISPE26

US Federal Security Guidance

The organization must establish and maintain a networks and firewalls metrics management program [ISPE26, CISWG Information Security Program Elements, January 10,2005]