CCI-001103

The organization establishes a traffic flow policy for each managed interface for each external telecommunication service.

Implementation Guidance

The organization being inspected/assessed defines and documents a traffic flow policy for each managed interface for each external telecommunication service.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented traffic flow policy to ensure the organization being inspected/assessed establishes a traffic flow policy for each managed interface for each external telecommunication service.

Compelling Evidence

1.) Signed and dated traffic flow policy document for managed interfaces for each external telecommunication service. 2.) Data flow diagram.

The controls below (if any) were marked by NIST as being related to CCI-001103.