bc-gov-sdn-zones

To map ISCF data classifications to SDN zones, classify the workload's data sensitivity and assign it to the corresponding Low, Medium, or High SDN zone. This determines the correct OpenShift DataClass and egress policy guidance for compliant workload deployment.

The SDN zone model is a security architecture framework that categorizes BC government workloads into distinct zones based on data sensitivity. It enforces internet ingress and egress constraints, zone adjacency rules, and 3PG connectivity to maintain strict network security boundaries.

Planning Third Party Gateway (3PG) connectivity involves defining non-internet egress paths according to BC government standards. The zoning process evaluates the workload's data classification to determine the safe, policy-driven external access paths and partner connectivity rules required.

Yes, zone adjacency rules define safe, policy-driven workload connectivity and external access paths. By applying the 2022 SDN Security Classification Model, you can establish compliant network boundaries and control data flow between different security zones.

Defining egress policy guidance requires applying the ISCF data classification framework to the workload. Based on the resulting Low, Medium, or High SDN zone assignment, the system generates actionable zoning decisions that specify internet egress constraints and 3PG connectivity requirements.

You need to reference the 2022 SDN Security Classification Model when assigning workloads to SDN zones and planning compliant egress paths. It provides the current ISCF framework standards required to map data sensitivity to the correct OpenShift DataClass and network boundaries.