Networks and environments are protected from unauthorized logical access and usage

frameworkNIST Cybersecurity Framework 2.0 sectionProtect (PR) topicsFirewall / Net Seg, Web Security, Zero Trust, Cloud Security, DNS Security, WAF, API Security frameworks7 4 2

gap from NIST CSF 2.0 → gap to NIST CSF 2.0 →

Wrong or missing mapping? Report it

Equivalents of PR.IR-01 in other frameworks
Framework	Requirement	Title	Link	Source / reason
ISO 27001	A.5.15 A.5.23 A.8.5 A.8.20 A.8.21 A.8.22 A.8.26	Access control; Information security for use of cloud services…	Crosswalk	Same topic: Zero Trust, Cloud Security, API Security, Firewall / Net Seg, DNS Security, WAF, Web Security 1 loosely related (not mappings) A.8.23 Web filtering Loosely related Only shares CSF PR.IR-01: related, not a mapping
CIS v8.1	CIS 6.8 CIS 12.2 CIS 15.1 CIS 4.4 CIS 4.5 CIS 4.9 CIS 8.6 CIS 9.2 CIS 9.3 CIS 12.3 CIS 12.4 CIS 12.6 CIS 12.7 CIS 13.4 CIS 13.5 CIS 13.9 CIS 13.10 CIS 16.10 CIS 16.12	Define and Maintain Role-Based Access Control; Establish and Maintain a Secure Network Architecture…	Crosswalk	Same topic: Zero Trust, Firewall / Net Seg, Cloud Security, DNS Security, Web Security, WAF, API Security 1 loosely related (not mappings) CIS 3.12 Segment Data Processing and Storage Based on Sensitivity Loosely related Only shares CSF PR.IR-01: related, not a mapping
SOC 2	CC6.6 CC9.2	Protection against threats from outside system boundaries; Managing vendor and business partner risk	Editorial	Same topic: Firewall / Net Seg, Web Security, Zero Trust, WAF, Cloud Security (editorial pick)
PCI DSS	1.2.3 6.2.3 7.2.1 8.3.1 12.8.1 12.8.5 1.2.1 1.3.1 1.4.1 6.2.4 6.4.1 6.4.2 6.4.3	Accurate network diagram maintained; Custom code reviewed before release…	Crosswalk	Same topic: Firewall / Net Seg, API Security, Zero Trust, Cloud Security, Web Security, WAF 7 loosely related (not mappings) 1.2.4 Accurate account-data flow diagram maintained Loosely related Only shares CSF PR.IR-01: related, not a mapping 5.2.1 Anti-malware deployed on system components Loosely related Only shares CSF PR.IR-01: related, not a mapping 5.2.2 Anti-malware detects, removes or contains known malware Loosely related Only shares CSF PR.IR-01: related, not a mapping 5.2.3 Systems without anti-malware periodically re-evaluated Loosely related Only shares CSF PR.IR-01: related, not a mapping 5.2.3.1 Re-evaluation frequency set by targeted risk analysis Loosely related Only shares CSF PR.IR-01: related, not a mapping 10.2.1 Audit logs enabled and active Loosely related Only shares CSF PR.IR-01: related, not a mapping 11.2.1 Wireless access points detected and unauthorised ones handled Loosely related Only shares CSF PR.IR-01: related, not a mapping
CMMC	AC.L2-3.1.1 AC.L2-3.1.20 SC.L2-3.13.1 SC.L2-3.13.5 SC.L2-3.13.6	Authorized Access Control; External Connections…	Crosswalk	Same topic: Zero Trust, Cloud Security, Firewall / Net Seg, Web Security 5 loosely related (not mappings) AC.L2-3.1.2 Transaction & Function Control Loosely related Only shares CSF PR.IR-01: related, not a mapping AC.L2-3.1.3 Control CUI Flow Loosely related Only shares CSF PR.IR-01: related, not a mapping SC.L2-3.13.2 Security Engineering Loosely related Only shares CSF PR.IR-01: related, not a mapping SC.L2-3.13.3 Role Separation Loosely related Only shares CSF PR.IR-01: related, not a mapping SC.L2-3.13.4 Shared Resource Control Loosely related Only shares CSF PR.IR-01: related, not a mapping
800-53	AC-3 AC-4 AC-6 AC-20 IA-2 IA-9 SA-9 SC-5 SC-7 SC-20 SC-21 SC-22 SI-10	Access Enforcement; Information Flow Enforcement…	Crosswalk	Same topic: Zero Trust, Firewall / Net Seg, Cloud Security, API Security, Web Security, WAF, DNS Security 1 loosely related (not mappings) SC-4 Information in Shared System Resources Loosely related Only shares CSF PR.IR-01: related, not a mapping
HIPAA	§164.308(b)(1)	Business Associate Contracts and Other Arrangements	Crosswalk	Same topic: Cloud Security 7 loosely related (not mappings) §164.308(a)(3) Workforce Security Loosely related Only shares CSF PR.IR-01: related, not a mapping §164.308(a)(3)(ii)(A) Authorization and/or Supervision Loosely related Only shares CSF PR.IR-01: related, not a mapping §164.308(a)(4)(ii)(B) Access Authorization Loosely related Only shares CSF PR.IR-01: related, not a mapping §164.310(b) Workstation Use Loosely related Only shares CSF PR.IR-01: related, not a mapping §164.312(a) Access Control Loosely related Only shares CSF PR.IR-01: related, not a mapping §164.312(a)(2)(i) Unique User Identification Loosely related Only shares CSF PR.IR-01: related, not a mapping §164.312(a)(2)(ii) Emergency Access Procedure Loosely related Only shares CSF PR.IR-01: related, not a mapping
GDPR	Art.28(1)	Processor	Editorial	Same topic: Cloud Security (editorial pick)
NIS2	6.1 6.7 6.8 11.1 11.6	Security in acquisition of ICT services, ICT systems or ICT products; Network security…	Crosswalk	Same topic: Cloud Security, Firewall / Net Seg, Zero Trust
Essential Eight	—	No requirement	No mapping in our data	No mapping in our data (Essential Eight links are editorial only).
DORA	Art.9(4)(b)Art.28(8)Art.30(2)	Protection and prevention; General principles…	Editorial	Same topic: Firewall / Net Seg, Cloud Security (editorial pick)
CPS 234	—	No requirement	No mapping in our data	No mapping in our data (CPS 234 is principles-based and its links are editorial).
Cyber Essentials	CE 1 CE 4	Firewalls; User Access Control	Editorial	Same topic: Firewall / Net Seg, Cloud Security (editorial pick)

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.