Policy
Network Communications Security Policy
This policy defines the technical and procedural controls for securing organizational networks across on-premise, cloud, and hybrid environments.
- Type
- Policy
- Version
- 1.1.19
- Date
- 2026-10-17
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material network, architecture, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Network segmentation and architecture
- 5. Firewall and perimeter security
- 6. Intrusion detection, prevention, and monitoring
- 7. Secure connectivity and remote access
- 8. Encryption and data protection
- 9. AI-assisted network defence
- 10. Sector-programme network security overlays
- 11. Monitoring, testing, and continuous improvement
- 12. Framework alignment
Frameworks it maps to
- ISO/IEC 27033-1:2015
- ISO/IEC 27001:2022
- ISO/IEC 27032:2023
- COBIT 2019
- NIST SP 800-207
- NIST SP 800-215
- CSA CCM v4.1
- EU NIS 2 Directive (Directive (EU) 2022/2555)
Related documents
- Information Security Policysecurity
- Logging and Monitoring Standardsecurity
- Encryption and Key Management Policysecurity
- Change Management and Configuration Control Procedureoperations
- Security Incident Reporting and Escalation Procedureresilience
- Supplier and Cloud Governance Frameworksupply-chain
Next
All Documents