#iso27001/2013
## A.13.1 Network security management
Objective: To ensure the protection of information in networks and its supporting information processing facilities.

### A.13.1.1 Network controls
Networks shall be managed and controlled to protect information in systems and applications.

### A.13.1.2 Security of network services
Security mechanisms, service levels and management requirements of all network services shall be identified and included in network services agreements, whether these services are provided in-house or outsourced.

### A.13.1.3 Segregation in networks
Groups of information services, users and information systems shall be segregated on networks.