Framework: The Center for Internet Security (CIS) Top 18 Controls

Control 12—Network Infrastructure Management—ensures that the systems responsible for connecting, routing, and protecting enterprise communications are securely configured, maintained, and monitored. Network infrastructure includes routers, switches, firewalls, wireless access points, and virtual gateways—components that form the backbone of connectivity and data flow. Because these devices sit at the intersection of internal and external systems, attackers often target them to intercept traffic, reroute data, or disable defenses. The objective of this control is to establish processes that maintain the confidentiality, integrity, and availability of network services through configuration baselines, patching, and centralized management. Properly maintained network hygiene prevents the slow decay of security posture caused by outdated firmware, open ports, and unmanaged changes.

Implementing strong network hygiene starts with documentation. Up-to-date architecture diagrams reveal how systems interconnect and where critical controls—such as firewalls or authentication servers—reside. Administrators must ensure all network devices run current, supported firmware versions and are configured according to secure baselines that disable unnecessary services. Access to device management interfaces should require strong authentication and encryption. Automated monitoring tools should continuously assess device health, configuration drift, and patch status. Periodic reviews align architecture with business requirements and identify obsolete or redundant components. By combining structured governance, technical automation, and consistent documentation, Control 12 establishes a network environment that is not only efficient but resilient—capable of defending against evolving attacks while supporting reliable, uninterrupted business operations.
 Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.