Standard

Network Security and Segmentation Standard

This standard defines requirements for network security architecture, segmentation, and perimeter controls across on-premises and cloud environments. It establishes technical and procedural controls for securing organizational networks, including requirements for network segmentation, firewall configuration, intrusion detection and prevention, and secure connectivity.

Type

Standard

Version

1.4.21

Date

2026-10-27

Owner

Chief Information Security Officer

Approving authority

Governance Library Maintainer

Classification

Public

Confidentiality

Public

Category

Operations

Review frequency

Annual and upon material platform or regulatory change

Licence

CC BY-SA 4.0

Read the full text on GitHub → (opens in a new tab)

Outline

• 1. Purpose
• 2. Scope
• 3. Governance
• 4. Network zone model
• 5. Firewall and perimeter security
• 6. Cloud network security
• 7. Intrusion detection, prevention, and monitoring
• 8. Remote access and secure connectivity
• 9. Encryption and data protection
• 10. Monitoring, testing, and continuous improvement
• 11. Framework alignment

Frameworks it maps to

• ISO/IEC 27001:2022
• ISO/IEC 27033-1:2015
• NIST SP 800-53 Rev. 5
• NIST SP 800-207
• NIST SP 800-41 Rev. 1
• NIST SP 800-94
• COBIT 2019
• CSA CCM v4.1
• CIS Controls v8.1
• EU NIS 2 Directive (Directive (EU) 2022/2555)
• CCCS ITSP.80.022, Baseline Security Requirements for Network Security Zones (version 2.0, effective 12 January 2021, per the held text)
• CCCS Baseline Cyber Security Controls for Small and Medium Organizations V1.2
• TBS Directive on Security Management, Appendix B

Related documents

• Information Security Policysecurity
• Production Security Requirementsoperations
• Cloud Security Configuration Baselineoperations
• Encryption and Key Management Policysecurity
• Logging and Monitoring Standardsecurity
• Zero Trust Architecture Frameworksecurity
• Canada Public Sector GRC Requirements Annexcompliance