CCI-001101

Implementation Guidance

The organization being inspected/assessed documents and implements information system access control mechanisms to limit the number of external connections to the information system.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented access control mechanisms to ensure that the organization being inspected/assessed limits the number of external network connections to the information system.

Compelling Evidence

1.) Signed and dated system communications protection policy. 2.) Current network topology diagrams. 3.) Architecture documentation or any other relevant documentation.