+SC-07(19) Block Communication from Non-organizationally Configured Hosts

SC-07(19) Block Communication from Non-organizationally Configured Hosts

Control

Block inbound and outbound communications traffic between [Assignement: communication clients] that are independently configured by end users and external service providers.

Discussion

Communication clients independently configured by end users and external service providers include instant messaging clients and video conferencing software and applications. Traffic blocking does not apply to communication clients that are configured by organizations to perform authorized functions.

Assessment Objective

  1. inbound communications traffic is blocked between [Assignement: communication clients] that are independently configured by end users and external service providers;
  2. outbound communications traffic is blocked between [Assignement: communication clients] that are independently configured by end users and external service providers.

Assessment Method

Examine

System and communications protection policy procedures addressing boundary protection system design documentation system hardware and software system architecture system configuration settings and associated documentation list of communication clients independently configured by end users and external service providers system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel with boundary protection responsibilities

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by SC-07(19) Block Communication from Non-organizationally Configured Hosts – Assessment Procedure
is blocked by Network Access Control (NAC)