← CIS Controls v8 in plain English

13.5 IG2

Control 13 / Network Monitoring and Defense

Manage Access Control for Remote Assets

Think of it likeOnly allowing family members with proper ID to access certain parts of the house when they're away.

In plain English

The family ensures that only authorized devices can access the network remotely, similar to requiring proper identification for family members to access restricted areas when they're not home.

Related CSF subcategories (unofficial mapping)

PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties.PR.IR-01: Networks and environments are protected from unauthorized logical access and usage.