What it means
Management plane security protects the interfaces, protocols, identities, networks, and workflows used to configure infrastructure and security systems.
Why it matters
Compromise of an administrative plane can let an attacker change policy, erase evidence, create access, or disable the controls that protect data traffic.
Practical focus
- Separate management access from user traffic
- Require strong identity and least privilege
- Use encrypted protocols and trusted administration paths
- Log and review configuration changes
Common mistakes
- Exposing management interfaces to the internet
- Using shared administrator accounts
- Allowing management from ordinary endpoints
- Monitoring data traffic but not administrative changes
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: