SID-HARD-03 — Network Segmentation (Separate Server Ports)
| Property | Value |
|---|---|
| Owner | platform |
| Category | technical |
| CSF Function | protect |
| Group | System Hardening Controls |
Description
Admin API on separate port with independent token authentication. WebSocket engine on dedicated port. Health/readiness endpoints (/readyz) with per-provider checks, 2s TTL cache. Kubernetes probe compatible.
Components
Source References
Framework Requirements
FitCEM Wallet Instance: FIT-DS-08
ISO 27001 Annex A: A.8.2, A.8.18, A.8.22, A.8.27