Navigate

CCI-001107

CCI-001107 Definition

The organization defines a frequency for the review of exceptions to the traffic flow policy for each external telecommunication service.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as every 180 days.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as every 180 days.

Compelling Evidence

Automatically compliant.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001107.

Control	Description
SC-7 (4)	The organization: SC-7 (4)(a): Implements a managed interface for each external telecommunication service; SC-7 (4)(b): Establishes a traffic flow policy for each managed interface; SC-7 (4)(c): Protects the confidentiality and integrity of the information being transmitted across each interface; SC-7 (4)(d): Documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and SC-7 (4)(e): Reviews exceptions to the traffic flow policy [Assignment: organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need.

Control

Description

SC-7 (4)

The organization:

SC-7 (4)(a): Implements a managed interface for each external telecommunication service;

SC-7 (4)(b): Establishes a traffic flow policy for each managed interface;

SC-7 (4)(c): Protects the confidentiality and integrity of the information being transmitted across each interface;

SC-7 (4)(d): Documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and

SC-7 (4)(e): Reviews exceptions to the traffic flow policy [Assignment: organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need.