CCI-001121

The organization protects against unauthorized physical connections at organization-defined managed interfaces.

Implementation Guidance

The organization being inspected/assessed documents and implements mechanisms to protect against unauthorized physical connections at internet access points, enclave LAN to WAN, cross domain solutions, and any DoD Approved Alternate Gateways. DoD has defined the managed interfaces as internet access points, enclave LAN to WAN, cross domain solutions, and any DoD Approved Alternate Gateways.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented mechanisms to ensure the organization being inspected/assessed protects against unauthorized physical connections at internet access points, enclave LAN to WAN, cross domain solutions, and any DoD Approved Alternate Gateways. DoD has defined the managed interfaces as internet access points, enclave LAN to WAN, cross domain solutions, and any DoD Approved Alternate Gateways.

Compelling Evidence

1.) Signed and dated documentation that describes a mechanisms to ensure the organization protects against unauthorized physical connections at internet access points, enclave LAN to WAN, cross domain solutions, and any DoD Approved Alternate Gateways. 2.) Network diagram. 3.) Applicable firewall rule set. 4.) Applicable firewall logs.

The controls below (if any) were marked by NIST as being related to CCI-001121.