NO-04—Non-disclosure of Routing Information

>Control Description

Organization does not disclose private IP addresses and routing information to unauthorized parties.

Theme

Technology

Type

Preventive

Policy/Standard

Network Security Standard

>Implementation Guidance

1. Ensure necessary requirements are defined that prohibits the disclosure of private IP addresses and routing information to unauthorized parties in the policy.

>Testing Procedure

1. Inspect Network Security Policy and/or Standard documents to determine whether requirements have been defined that prohibits the disclosure of private IP addresses and routing information to unauthorized parties. 2. Review the configuration to determine the non-disclosure of private IP Addresses and Network Address Translation.