CCI-002315

The organization defines the number of managed network access control points through which the information system routes all remote access.

Implementation Guidance

The organization being inspected/assessed defines and documents the number of managed network access control points through which the information system routes all remote access. DoD has determined the number is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented number to ensure the organization being inspected/assessed defines the number of managed network access control points through which the information system routes all remote access. DoD has determined the number is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated documentation (ex. network flow chart, network diagram, hardware inventory sheet and/or other document that will list all remote access points) that defines the number of managed network access control points through which the information system routes all remote access.

The controls below (if any) were marked by NIST as being related to CCI-002315.