1.2.3Network security controls (NSCs) are configured and maintained

Defined Approach Requirements:

An accurate network diagram(s) is maintained that shows all connections between the CDE and other networks, including any wireless networks.

Defined Approach Testing Procedures:

1.2.3.a Examine diagram(s) and network configurations to verify that an accurate network diagram(s) exists in accordance with all elements specified in this requirement.

1.2.3.b Examine documentation and interview responsible personnel to verify that the network diagram(s) is accurate and updated when there are changes to the environment.