CCI-002078

The organization prohibits the direct connection of an organization-defined information system to a public network.

Implementation Guidance

The organization being inspected/assessed does not connect any information system defined in CA-3 (4), CCI 2079 to a public network.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines network topology diagrams and examines the information system to ensure the organization being inspected/assessed does not connect any information system defined in CA-3 (4), CCI 2079 to a public network.

Compelling Evidence

1.) Signed and dated Network topology diagram

The controls below (if any) were marked by NIST as being related to CCI-002078.