{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:b3e7dfe095f4f6ac9eb3dee98f171c19585678c068d46b38bb7e5a009a0c80d3","slug":"controls-network-segmentation-boundary-rule-management","url":"/assets/agent_workflow-controls-network-segmentation-boundary-rule-management-8183fa87.07f75857fcfbde29.json"},"kind":"record","record":{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"canonicalUrl":"https://workflow-library.com/all/?w=controls-network-segmentation-boundary-rule-management","description":"Network Segmentation & Boundary Rule Management as a decision-aware operator workflow covering trust-zone maintenance, gated rule-change implementation, boundary threat monitoring, the quarterly segmentation and rule-set review, and cross-domain exchange-policy enforcement. This cycle runs on the EXISTING boundary-protection Control item (domains network_communications_security; framework NIST 800-53, NIST CSF 2.0, ISO 27001, SOC 2; frequency quarterly; the boundary control owner as control_owner) — each quarterly run is one workflow instance attached to and enriching that Control, never a new control record. In scope: the trust-zone model, the managed interfaces (firewalls, gateways, proxies) mediating traffic between zones, the external boundary and key internal boundaries, and the cross-domain interconnection points, all under a deny-by-default baseline (NIST 800-53 SC-7, SC-16, SC-46; NIST CSF 2.0 PR.IR-01; ISO 27001 A.8.22; SOC 2 CC6.6). No upstream workflow feeds this cycle; it self-seeds from its own prior-cycle carry-forward — open corrective-action Issue items linked to the Control plus the prior run's closure record and archived rule-change record log. Named deliverables: the reconciled trust-zone model, the verified rule-change record log, the boundary threat-monitoring summary, the cross-domain exchange-policy enforcement report, the quarterly segmentation & rule-set review report, the boundary-posture dashboard, and corrective-action Issues linked to the Control. Downstream, it hands off only to its own next cycle via the carry-forward closure record; a confirmed intrusion is escalated to the incident-response workflow (out of scope), as are host/endpoint controls.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=controls-network-segmentation-boundary-rule-management","capabilities":[],"controls":["UC-NET-01","UC-NET-14","UC-DATA-11"],"domains":["controls"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:b3e7dfe095f4f6ac9eb3dee98f171c19585678c068d46b38bb7e5a009a0c80d3","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-network-segmentation-boundary-rule-management","standards":["nist-800-53","nist-csf-2","iso-27001","soc2"],"teams":["it"]},"id":"wf:C48","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AC48","slug":"controls-network-segmentation-boundary-rule-management","sourceIds":["aiuc-1","gdpr","iso-27001","nist-800-53","nist-ai-agent-identity","nist-ai-tevv-athlon","nist-csf-2","soc2"],"sourceUrl":null,"title":"Network Segmentation & Boundary Rule Management","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6fc5f80b1c6124c0e7289eb1f3533b6b9d8dbfcdb7f7008615e82cbafb5d2af8","properties":{},"sourceDetailPath":"/data/v1/records/wf-c48-1fcd5f42.json","sourceId":"wf:C48","targetDetailPath":"/data/v1/records/uc-uc-net-01-30bfdc5f.json","targetId":"uc:UC-NET-01","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9e0299ea9f795cac555e637bb9ab07ea7399103687cc8f5bac16f60abb53dbcc","properties":{},"sourceDetailPath":"/data/v1/records/wf-c48-1fcd5f42.json","sourceId":"wf:C48","targetDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","targetId":"uc:UC-DATA-11","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:da98b9dcbb9458716349a3f2c91af12c908e1072d9152a7ec00a2b158db4795e","properties":{},"sourceDetailPath":"/data/v1/records/wf-c48-1fcd5f42.json","sourceId":"wf:C48","targetDetailPath":"/data/v1/records/uc-uc-net-14-bacae152.json","targetId":"uc:UC-NET-14","type":"operates"}],"schemaVersion":1}