The IT Law Wiki
mNo edit summary
 
(One intermediate revision by the same user not shown)
Line 3: Line 3:
 
An '''internal network''' is
 
An '''internal network''' is
   
{{Quote|[a] [[network]] where: (i) the establishment, [[maintenance]], and provisioning of [[security controls]] are under the direct control of organizational [[employee]]s or [[contractor]]s; or (ii) [[cryptographic]] [[encapsulation]] or similar [[security]] [[technology]] [[implement]]ed between organization-controlled [[endpoint]]s, provides the same effect (at least with regard to [[confidentiality]] and [[integrity]]). An internal network is typically organization-owned, yet may be organization-controlled while not being organization-owned.<ref>[[NIST Special Publication SP 800-171]], App. B, at B-4.</ref>}}
+
{{Quote|[a] [[network]] where: (i) the establishment, [[maintenance]], and provisioning of [[security controls]] are under the direct control of organizational [[employee]]s or [[contractor]]s; or (ii) [[cryptographic]] [[encapsulation]] or similar [[security]] [[technology]] [[implement]]ed between organization-controlled [[endpoint]]s, provides the same effect (at least with regard to [[confidentiality]] and [[integrity]]). An internal network is typically organization-owned, yet may be organization-controlled while not being organization-owned.<ref>[[NIST Special Publication SP 800-171]], at 22.</ref>}}
   
 
== References ==
 
== References ==
Line 11: Line 11:
   
 
* [[Intranet]]
 
* [[Intranet]]
  +
[[Category:Definition]]
  +
[[Category:Computing]]
  +
[[Category:Technology]]
  +
[[Category:Security]]

Latest revision as of 06:57, 1 March 2018

Definition[]

An internal network is

[a] network where: (i) the establishment, maintenance, and provisioning of security controls are under the direct control of organizational employees or contractors; or (ii) cryptographic encapsulation or similar security technology implemented between organization-controlled endpoints, provides the same effect (at least with regard to confidentiality and integrity). An internal network is typically organization-owned, yet may be organization-controlled while not being organization-owned.[1]

References[]

See also[]