{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-760.40.30","name":"Network Security Controls","level":3,"parent_id":"BC-760.40","l1_id":"BC-760","industry":"cross-industry","macro_id":"MC-70","path":["Cybersecurity","Infrastructure & Endpoint Protection","Network Security Controls"],"description":"Define and enforce firewall policy, segmentation and remote access controls so a breach in one zone stays in that zone.","aliases":[],"in_scope":[],"out_of_scope":[],"csdm_note":null,"status":"active","successor_id":null,"child_ids":[]},"crosswalk":{"realized_by":[],"used_in":[],"patterns":[{"id":"DP-340","name":"Zero Trust","category":"Security","via":null},{"id":"DP-430","name":"Service Mesh","category":"Cloud","via":null}],"stacks":[],"books":[]},"ancestors":[{"id":"BC-760","name":"Cybersecurity","level":1},{"id":"BC-760.40","name":"Infrastructure & Endpoint Protection","level":2}],"children":[]}