CCI-002387

Defines the denial of service attacks against other systems that the system is to restrict the ability of individuals to launch.

Implementation Guidance

Determine if the ability of individuals to launch [SC-05(01)_ODP; denial-of-service attacks for which to restrict the ability of individuals to launch are defined] against other systems is restricted.

Validation Procedures

Examine: [SELECT FROM: System and communications protection policy; procedures addressing denial-of-service protection; system design documentation; list of denial-of-service attacks launched by individuals against systems; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel with incident response responsibilities; system developer]. Test: [SELECT FROM: Mechanisms restricting the ability to launch denial-of-service attacks against other systems].

The controls below (if any) were marked by NIST as being related to CCI-002387.