[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F12":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","12","Control 12","Network Infrastructure Management",1592,"Center for Internet Security (CIS)","**What it asks for.** Organisations should actively manage network devices such as routers, switches, firewalls and wireless access points to stop attackers exploiting vulnerable services and weak configurations. It covers keeping infrastructure up to date, documenting architecture and securing management access.\n\n**In practice.** Network firmware is kept current, configurations are standardised and version controlled, and an up to date architecture diagram shows segments and trust boundaries. Administration happens over secure protocols from dedicated management networks or privileged access workstations, and remote access uses authenticated, encrypted channels. Evidence includes network diagrams, firmware version reports, configuration backups and change records.\n\n**Common gaps.** Network devices are frequently left on old firmware because patching requires downtime, and management interfaces are sometimes exposed to user networks or the internet. Architecture documentation tends to drift away from reality.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fnetwork-infrastructure-management","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},1675,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"internet-connected-refrigeration-units-expose-critical-infrastructure-to-root-level-attacks","Internet-Connected Refrigeration Units Expose Critical Infrastructure to Root-Level Attacks","2026-11-13T22:21:16.893+00:00",{"slug":24,"title":25,"published_at":26},"sckit-worm-hijacks-screenconnect-sessions-to-compromise-it-technician-workstations","SCKit Worm Hijacks ScreenConnect Sessions to Compromise IT Technician Workstations","2026-11-13T22:20:58.16+00:00",{"slug":28,"title":29,"published_at":30},"unpatched-check-point-gateways-leveraged-to-wipe-vmware-esxi-infrastructure","Unpatched Check Point Gateways Leveraged to Wipe VMware ESXi Infrastructure","2026-11-13T17:20:43.507+00:00",{"slug":32,"title":33,"published_at":34},"state-actors-exploit-telecom-protocols-to-intercept-calls-and-sms-at-network-level","State Actors Exploit Telecom Protocols to Intercept Calls and SMS at Network Level","2026-11-13T13:22:35.957+00:00",{"slug":36,"title":37,"published_at":38},"beast-ransomwares-hidden-control-panel-enables-targeted-encryption-across-networks","Beast Ransomware's Hidden Control Panel Enables Targeted Encryption Across Networks","2026-11-13T09:20:42.408+00:00",{"slug":40,"title":41,"published_at":42},"zero-day-in-n-central-exploited-within-hours-of-poc-release","Zero-Day in N-central Exploited Within Hours of PoC Release","2026-11-13T08:21:00.104+00:00",{"slug":44,"title":45,"published_at":46},"unpatched-check-point-gateways-weaponized-for-destructive-wiper-attacks","Unpatched Check Point Gateways Weaponized for Destructive Wiper Attacks","2026-11-13T08:20:43.007+00:00",{"slug":48,"title":49,"published_at":50},"sckit-worm-exploits-msp-remote-tools-via-authentication-flaw","SCKit Worm Exploits MSP Remote Tools via Authentication Flaw","2026-11-12T23:20:21.957+00:00",{"slug":52,"title":53,"published_at":54},"zero-day-in-n-able-n-central-exploited-within-hours-of-poc-release","Zero-Day in N-able N-central Exploited Within Hours of PoC Release","2026-11-12T20:20:21.277+00:00",{"slug":56,"title":57,"published_at":58},"zero-day-bypasses-n-central-patch-exposing-root-access-on-managed-servers","Zero-Day Bypasses N-central Patch, Exposing Root Access on Managed Servers","2026-11-12T17:20:56.853+00:00",{"slug":60,"title":61,"published_at":62},"critical-mongodb-crash-bug-exploitable-without-authentication","Critical MongoDB Crash Bug Exploitable Without Authentication","2026-11-12T13:20:58.595+00:00",{"slug":64,"title":65,"published_at":66},"pan-os-rce-flaw-grants-root-access-via-panorama-patch-now","PAN-OS RCE Flaw Grants Root Access via Panorama — Patch Now","2026-11-12T09:21:13.239+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"patch-management","Automated patch management","Known holes get closed in days, not months.",932,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",835,{"slug":79,"name":80,"problem":81,"stories":82},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",484,{"slug":84,"name":85,"problem":86,"stories":87},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",359,{"slug":89,"name":90,"problem":91,"stories":92},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",234,{"slug":94,"name":95,"problem":96,"stories":97},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",205,[99,104,110,115,120,125,131,137],{"family":5,"item":100,"code":101,"title":102,"together":103},"7","Control 7","Continuous Vulnerability Management",1137,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-800-53","si-2","SI-2","Flaw Remediation",981,{"family":111,"item":112,"code":113,"title":113,"together":114},"itil","overview","ITIL",805,{"family":105,"item":116,"code":117,"title":118,"together":119},"sc-7","SC-7","Boundary Protection",565,{"family":5,"item":121,"code":122,"title":123,"together":124},"13","Control 13","Network Monitoring and Defense",543,{"family":126,"item":127,"code":128,"title":129,"together":130},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",473,{"family":132,"item":133,"code":134,"title":135,"together":136},"gdpr","32","Article 32","Security of processing",438,{"family":105,"item":138,"code":139,"title":140,"together":141},"ra-5","RA-5","Vulnerability Monitoring and Scanning",423]