+SC-07(28) Connections to Public Networks

SC-07(28) Connections to Public Networks

Control

Prohibit the direct connection of [Assignement: system] to a public network.

Discussion

A direct connection is a dedicated physical or virtual connection between two or more systems. A public network is a network accessible to the public, including the Internet and organizational extranets with public access.

Assessment Objective

the direct connection of the [Assignement: system] to a public network is prohibited.

Assessment Method

Examine

System and communications protection policy procedures addressing boundary protection system design documentation system hardware and software system architecture system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developer organizational personnel with boundary protection responsibilities

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-07(28) Connections to Public Networks – Assessment Procedure
is blocked by Direct Internet Access Restrictions