Assessment Objective
Determine if:
- network communications traffic is denied by default.
- network communications traffic is allowed by exception.
Assessment Methods
Examine
- system and communications protection policy and procedures
- procedures for boundary protection
- system design documentation
- system configuration settings
- system audit records
- system security plan
- other relevant documents or records
Interview
- personnel with boundary protection responsibilities
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for implementing traffic management at managed interfaces
Συνδεδεμένα ζητήματα
| Τύπος σύνδεσης | Ζήτημα |
|---|---|
| blocks | 03.13.06 Network Communications – Deny by Default – Allow by Exception |