K07 · evidence-bundled critical-infrastructure assurance

Management-plane separation and recovery

Direct answer

Separate management networks and identities, require hardware-rooted attestation where available, restrict update authority, and maintain an independently recoverable management baseline.

Stable record: ADR-K07-004
Claim status: PROJECT TECHNICAL PROPOSAL
Last reviewed: 2026-08-16
Research cutoff: 2026-08-16
Source type: GOVERNED PROJECT KNOWLEDGE
Currentness: Current for release 2.1.0; external sources require periodic revalidation.
Correction state: No unresolved public correction recorded for this release.
Machine record: Static JSON record

Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.

Context

BMC, hypervisor, firmware, orchestration and network-management planes can bypass workload security and persist below normal monitoring.

Proposed reference decision

Separate management networks and identities, require hardware-rooted attestation where available, restrict update authority, and maintain an independently recoverable management baseline.

Alternatives considered

shared production and management network
password-only remote management
unverified firmware update

Consequences

additional identity and key infrastructure
stronger update provenance
management recovery becomes testable

Defeaters and reversal conditions

internet-exposed management interface
unsigned firmware
shared root credential
unrecoverable key service

Source relationships

NIST SP 800-161 Revision 1 Update 1 — Cybersecurity Supply Chain Risk Management Practices — National Institute of Standards and Technology; Revision 1 Update 1; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.
CISA Hardware Bill of Materials Framework for Supply Chain Risk Management — Cybersecurity and Infrastructure Security Agency; September 2023 framework; OFFICIAL FRAMEWORK. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.

Use boundary

This record is a proposed reference decision. A competent owner must bind it to actual site constraints, authority, hazards, license conditions, interfaces, implementation evidence, and change control.