CCI-001097

The information system monitors and controls communications at the external boundary of the information system and at key internal boundaries within the system.

Implementation Guidance

The organization being inspected/assessed documents and implements processes to monitor and control communications at the external boundary of the system and at key internal boundaries within the system. The organization must maintain an audit trail of monitoring activities.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the audit trail of monitoring activities to ensure the organization being inspected/assessed monitors and controls communications at the external boundary of the system and at key internal boundaries within the system.

Compelling Evidence

1.) Current Network diagram. 2.) Applicable firewall rule set. 3.) Applicable firewall logs.

The controls below (if any) were marked by NIST as being related to CCI-001097.