CCI-002075

The organization prohibits the direct connection of an organization-defined unclassified, non-national security system to an external network without the use of organization-defined boundary protection device.

Implementation Guidance

The organization being inspected/assessed does not connect any national security systems to an external network without the use of protection devices defined in CA-3 (3), CCI 2077.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines network topology diagrams and examines the information system to ensure the organization being inspected/assessed does not connect any national security systems to an external network without the use of protection devices defined in CA-3 (3), CCI 2077.

Compelling Evidence

1.) Signed and dated Network topology diagram

The controls below (if any) were marked by NIST as being related to CCI-002075.