+SC-07(05) Deny by Default — Allow by Exception
|
SC-07(05) Deny by Default — Allow by Exception
Control
Deny network communications traffic by default and allow network communications traffic by exception [Selection(one-or-more): at managed interfaces; for {{ insert: param, sc-07.05_odp.02 }} ].
Discussion
Denying by default and allowing by exception applies to inbound and outbound network communications traffic. A deny-all, permit-by-exception network communications traffic policy ensures that only those system connections that are essential and approved are allowed. Deny by default, allow by exception also applies to a system that is connected to an external system.
Assessment Objective
- network communications traffic is denied by default [Selection(one-or-more): at managed interfaces; for {{ insert: param, sc-07.05_odp.02 }} ];
- network communications traffic is allowed by exception [Selection(one-or-more): at managed interfaces; for {{ insert: param, sc-07.05_odp.02 }} ].
Assessment Method
Examine
System and communications protection policy
procedures addressing boundary protection
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developer
organizational personnel with boundary protection responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|