DeftTrust

← Controls

IT-04:NET-02

§6 Firewalls restrict inbound/outbound traffic; only approved ports permitted

Status
No evidence
Policy cadence
Annual
Last evidence
Next due
Owner
Operations Manager & CTO
TSC
CC6.6
Evidence folder
03_Vulnerability_Management
Automatable
Yes
Policy
IT-04
Policy version
v2.0 (2026-03-26) — control IDs assigned by ComplianceHub; no control report exists

Collectors

CollectorRelationshipSamplesWhat it observes
probes.external_ports satisfies monthly Proves only the UFW-permitted ports answer from the public internet
probes.ssh_posture supports monthly Proves remote production access is SSH-2 only, with no unencrypted alternative
scans.external supports monthly Monthly unauthenticated scan of everything we expose to the internet

Evidence satisfying this control

CollectedCollectorResultSourceDigest
No artifact satisfies this control.