9.3 Network Isolation

Description

Agent network access MUST be restricted to required endpoints only.

Rationale

Unrestricted network access enables data exfiltration and lateral movement.

Audit Procedure

1. List all network connections
2. Check firewall rules
3. Verify egress filtering

Remediation

1. Implement network policies
2. Use egress proxy
3. Implement DNS filtering

Framework Mappings