← CIS Controls v8 in plain English

13.9 IG3

Control 13 / Network Monitoring and Defense

Deploy Port-Level Access Control

Think of it likeEvery wall jack checks a device's ID before it will supply a connection, so a stranger who plugs in gets nothing.

In plain English

Only recognized, authorized devices are allowed to connect at each network port, so an unknown machine plugged into the wall is denied access.

Related CSF subcategories (unofficial mapping)