Navigate

CCI-001173

CCI-001173 Definition

The organization establishes usage restrictions for Voice over Internet Protocol (VoIP) technologies based on the potential to cause damage to the information system if used maliciously.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed establishes and documents usage restrictions for Voice over Internet Protocol (VoIP) technologies based on the potential to cause damage to the information system if used maliciously.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented usage restrictions to ensure the organization being inspected/assessed establishes usage restrictions for Voice over Internet Protocol (VoIP) technologies based on the potential to cause damage to the information system if used maliciously.

Compelling Evidence

1.) System protection policy. 2.) Communications protection policy (reference VoIP section).

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001173.

Control	Description
SC-19	The organization: SC-19a.: Establishes usage restrictions and implementation guidance for Voice over Internet Protocol (VoIP) technologies based on the potential to cause damage to the information system if used maliciously; and SC-19b.: Authorizes, monitors, and controls the use of VoIP within the information system.