Firewall

A firewall is a device or set of devices designed to permit or deny network transmissions based upon a set of rules and is frequently used to protect networks from unauthorized access while permitting legitimate communications to pass. Many personal computer operating systems include software-based firewalls to protect against threats from the public Internet. Many routers that pass data between networks contain firewall components.

Cloud Controls Matrix (CCM) Data

SA-09 | Security Architecture | Segmentation

Control Specification +-

System and network environments are separated by firewalls to ensure the following requirements are adhered to: ? Business and customer requirements ? Security requirements ? Compliance with legislative, regulatory, and contractual requirements ? Separation of production and non-production environments ? Preserve protection and isolation of sensitive data

Architectural Relevance +-

Physical	Network	Compute	App	Data
True	True	True	True	True

Corp Gov Relevance +-

Corp Gov Relevance
False

Cloud Service Delivery Model Applicability +-

SaaS	PaaS	IaaS
True	True	True

Supplier Relationship +-

Service Provider	Tenant / Consumer
True	True

Scope Applicability +-

COBIT 4.1	HIPAA / HITECH Act	ISO/IEC 27001-2005
DS5.10	45 CFR 164.308 (a)(4)(ii)(A)	A.11.4.5 A.11.6.1 A.11.6.2 A.15.1.4

NIST SP800-53 R3	FedRAMP (Final 2012) Low Impact	FedRAMP (Final 2012) Moderate Impact	PCI DSS v2.0
AC-4 SC-2 SC-3 SC-7	NIST SP 800-53 R3 SC-7	NIST SP 800-53 R3 AC-4 NIST SP 800-53 R3 SC-2 NIST SP 800-53 R3 SC-7 NIST SP 800-53 R3 SC-7 (1) NIST SP 800-53 R3 SC-7 (2) NIST SP 800-53 R3 SC-7 (3) NIST SP 800-53 R3 SC-7 (4) NIST SP 800-53 R3 SC-7 (5) NIST SP 800-53 R3 SC-7 (7) NIST SP 800-53 R3 SC-7 (8) NIST SP 800-53 R3 SC-7 (12) NIST SP 800-53 R3 SC-7 (13) NIST SP 800-53 R3 SC-7 (18)	1.1 1.2 1.2.1 1.3 1.4

BITS Shared Assessments SIG v6.0	BITS Shared Assessments SIG v5.0	GAPP (Aug 2009)
G.9.2, G.9.3, G.9.13	G.17

Jericho Forum	NERC CIP
Commandment #1 Commandment #2 Commandment #3 Commandment #9 Commandment #10 Commandment #11	CIP-004-3 R3

Consensus Assessments Initiative Questionnaire (CAIQ) Data

Security Architecture (SA) | ID #SA-09.1

Are system and network environments logically separated to ensure Business and customer security requirements?

Compliance Mapping +-

COBIT	HIPAA	ISO27001	SP800_53
COBIT 4.1 DS5.10	45 CFR 164.308 (a)(4)(ii)(A)	A.11.4.5 A.11.6.1 A.11.6.2 A.15.1.4	NIST SP800-53 R3 AC-4 NIST SP800-53 R3 SC-2 NIST SP800-53 R3 SC-3 NIST SP800-53 R3 SC-7

FedRAMP	PCI_DSS	BITS	GAPP
	PCI DSS v2.0 1.1 PCI DSS v2.0 1.2 PCI DSS v2.0 1.2.1 PCI DSS v2.0 1.3 PCI DSS v2.0 1.4	AUP v5.0 G.17 SIG v6.0: G.9.2, G.9.3, G.9.13

Model Applicability +-

SaaS	PaaS	IaaS
True	True	True

Scope Applicability +-

SP	CUST
True	True