Control Objectives: Network and Infrastructure

Protection from a Denial-of-Service attack (DoS, DDoS) is intended to keep a network service available despite criminal attacks attempting to interrupt or damage the Roche Network service's availability by overwhelming it with malicious traffic.

Systems with different levels of security (e.g. lab equipment, internet-facing applications, IoT devices) should be placed into different security zones (e.g segmented networks) to protect the resources appropriately and minimize the impact of individual system compromise.