Commit 04b91cd9 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Made the network segmentation mandatory

Closes #106 HAS45
parent c2818ef1
Loading
Loading
Loading
Loading
+4 −3
Original line number Diff line number Diff line
@@ -194,13 +194,14 @@ This document focuses on defining the expected outcomes of the chosen mechanisms

### 5.2.3 Network segmentation

Network segmentation is encouraged to be used where applicable.
The best practise is to use dedicated network segment for network management traffic.
The best practise is to use dedicated network segment for network management and control traffic.
Management traffic can be configuration updates, encryption keys, software updates, and others alike.

* **[REQ-NETWORK-1]** Network segmentation shall be used where applicable.

ZeroTrust routing is also encouraged where applicable.

<mark>Editor's note: TODO: this should need to be coupled with Operative environment chapter</mark>
<mark>Editor's note: TODO: this should need to be coupled with Operative environment chapter or with general requirements.</mark>

### 5.2.4 State-of-the-art cryptographic libraries