CCI-002081

The organization defines the information systems that employ either an allow-all, deny-by-exception or a deny-all, permit-by-exception policy for allowing connections to external information systems.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-002081.