+SC-07(22) Separate Subnets for Connecting to Different Security Domains

SC-07(22) Separate Subnets for Connecting to Different Security Domains

Control

Implement separate network addresses to connect to systems in different security domains.

Discussion

The decomposition of systems into subnetworks (i.e., subnets) helps to provide the appropriate level of protection for network connections to different security domains that contain information with different security categories or classification levels.

Assessment Objective

separate network addresses are implemented to connect to systems in different security domains.

Assessment Method

Examine

System and communications protection policy procedures addressing boundary protection system design documentation system hardware and software system architecture system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developer organizational personnel with boundary protection responsibilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by SC-07(22) Separate Subnets for Connecting to Different Security Domains – Assessment Procedure
is blocked by Separate Subnet for Connecting to Different Security Domains