{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Network & Communications Security","Secure Configuration & Change Management"],"inherent_rating":"high","taxonomy":["iso-27005-vulnerability"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-poor-perimeter-architecture","description":"Because externally-facing connections lack perimeter controls (firewalls, DMZ) and the network lacks segmentation, redundancy, and defense-in-depth, attackers can breach the boundary and move laterally and single points of failure go unmitigated, resulting in intrusion, data exfiltration, and outage.","details":{"category":"cyber_security","impact":"high","inherent_rating":"high","likelihood":"high","risk_id":"net-poor-perimeter-architecture","taxonomies":["iso-27005-vulnerability"],"treatment":"mitigate"},"id":"risk:net-poor-perimeter-architecture","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-poor-perimeter-architecture","sourceIds":["iso-27001","nist-800-53","nist-csf-2","pci-dss","soc2"],"sourceUrl":null,"title":"Poor network architecture and unprotected public connections","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:15e92c1e1284f358205d750de51a3b8c7690252a0cb5ba2023fe594b59986692","properties":{"rationale":"Hardening network security controls (e.g., firewall baselines) contributes to boundary protection, but segmentation/DMZ architecture is the operative defense.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-config-01-8f911a32.json","sourceId":"uc:UC-CONFIG-01","targetDetailPath":"/data/v1/records/risk-net-poor-perimeter-architecture-26b5f06f.json","targetId":"risk:net-poor-perimeter-architecture","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:75dcbcac446768a354cbd605bd37f59a0e6a00b2e4411f342ea754bb5fb96e62","properties":{"rationale":"Actively securing networks and hardening network devices strengthens the perimeter, though segmentation/firewalls (UC-NET-01) are the operative boundary defense.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-log-08-61745e12.json","sourceId":"uc:UC-LOG-08","targetDetailPath":"/data/v1/records/risk-net-poor-perimeter-architecture-26b5f06f.json","targetId":"risk:net-poor-perimeter-architecture","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d0ef9dfb2ff2e380b22e063241000e2973923fb1b81bde6ad50a0a29bba8a376","properties":{"rationale":"Zone segmentation plus deny-by-default mediation at firewalls/gateways/proxies is the operative defense against unprotected public connections and lateral movement.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-01-30bfdc5f.json","sourceId":"uc:UC-NET-01","targetDetailPath":"/data/v1/records/risk-net-poor-perimeter-architecture-26b5f06f.json","targetId":"risk:net-poor-perimeter-architecture","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e1f3ec7c6dc144c46f9a47bc0593b64f49b204c13db538fd8ab4cdb222c57262","properties":{"rationale":"Thin nodes, heterogeneity, and distribution add defense-in-depth and remove single points of failure in the architecture.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-09-6777e6ac.json","sourceId":"uc:UC-NET-09","targetDetailPath":"/data/v1/records/risk-net-poor-perimeter-architecture-26b5f06f.json","targetId":"risk:net-poor-perimeter-architecture","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e412c7b50b5c6e77879443aebfd3e54cab791a8cb12ba18575988454c72ec4a7","properties":{"rationale":"Alternate paths and graceful failure mitigate the redundancy and single-point-of-failure gaps in weak network architecture.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-08-e0d8837a.json","sourceId":"uc:UC-NET-08","targetDetailPath":"/data/v1/records/risk-net-poor-perimeter-architecture-26b5f06f.json","targetId":"risk:net-poor-perimeter-architecture","type":"mitigates"}],"schemaVersion":1}