CCI-002076

The organization defines the unclassified, non-national security system that is prohibited from directly connecting to an external network without the use of an organization-defined boundary protection device.

Implementation Guidance

The organization being inspected/assessed defines and documents the unclassified, non-national security system that is prohibited from directly connecting to an external network without the use of an organization-defined boundary protection device. DoD has determined the unclassified, non-national security system is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented unclassified, non-national security system to ensure the organization being inspected/assessed defines the unclassified, non-national security system that is prohibited from directly connecting to an external network without the use of an organization-defined boundary protection device. DoD has determined the unclassified, non-national security system is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated Security Assessment Plan or Interconnection Security Agreement defining the boundary protection devices to be used for unclassified, non-national security system to an external network.

The controls below (if any) were marked by NIST as being related to CCI-002076.