Network Device
Management
Policy
GROUP
8
Network Device
Management Policy:
Objectives & Scope
This policy sets a framework for secure configuration, monitoring,
and management of network devices.
It applies to all employees, contractors, and stakeholders
managing routers, switches, firewalls, and wireless access points.
Compliance is mandatory to protect network integrity,
confidentiality, and availability.
Protective Measures (NDM-01
to NDM-04)
NDM-01 Inventory
Maintain an inventory of all approved network devices.
NDM-02 Configuration
Benchmarks
Keep cybersecurity configuration standards for authorized devices.
NDM-03 Management
Network
Manage devices only from an approved dedicated subnet.
NDM-04 Remote
Management
Disallow device management from remote or Internet-based networks.
Procedures (NDM-05 to NDM-
07)NDM-05 PAM NDM-06 MFA Access NDM-07 Encrypted
System
Manage devices via approved Require Multi-Factor
Protocols
Privileged Account Authentication for device Use encrypted remote
Management or jump box. access. management protocols like
SSH or TLS.
Monitoring & Updating (NDM-08 to
NDM-11)
NDM-08 NDM-09 Device NDM-10 Status NDM-11 IP Address
Management Discovery Monitoring Management
System
Maintain a system to Regularly scan for new Monitor device status Perform IPAM including
manage all approved devices to update and alert when offline. DHCP scope
network devices. inventory. management.
Advanced Monitoring &
Firmware (NDM-12 to
NDM-14)
NDM-12 NDM-13 NDM-14
Netflow Configurati Firmware
Datanetflow data
Record on Audit Updates
from all network Regularly compare Ensure devices use
devices. configurations to the latest firmware
detect changes and versions.
alert.
Handling Violations
1 Disciplinary Actions 2 Legal
Consequences range
Consequences
Violations involving illegal
from training to acts may lead to legal
termination based on action.
severity.
3 Enforcement
Consistent and impartial enforcement aligned with breach
seriousness.
Conclusions
Strengthen Security Ensure Compliance
Policy enforces secure Mandatory adherence
device management and maintains regulatory and
reduces risks. industry standards.
Protect Assets
Safeguards network integrity, confidentiality, and availability.