CCI-001106

The organization reviews exceptions to the traffic flow policy on an organization-defined frequency for each external telecommunication service.

Implementation Guidance

The organization being inspected/assessed implements a process to review exceptions to the traffic flow policy every 180 days for each external telecommunication service. The organization must maintain an audit trail of reviews. DoD has defined the frequency as every 180 days.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of reviews to ensure the organization being inspected/assessed reviews exceptions to the traffic flow policy every 180 days for each external telecommunication service. DoD has defined the frequency as every 180 days.

Compelling Evidence

1.) Signed and dated traffic flow policy. 2.) Process documentation that reviews exceptions to the traffic flow policy.

The controls below (if any) were marked by NIST as being related to CCI-001106.