CCI-002395

Implement subnetworks for publicly accessible system components that are physically and/or logically separated from internal organizational networks.

Implementation Guidance

The organization being inspected/assessed designs the information system to leverage subnetworks so that publicly accessible system components are physically and/or logically separated from internal organizational networks.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines network topology diagrams, architecture documentation, or any other documentation identifying component partitioning to ensure the organization being inspected/assessed implements subnetworks for publicly accessible system components that are physically and/or logically separated from internal organizational networks.

Compelling Evidence

1.) Current network topology diagrams. 2.) Architecture documentation or relevant documentation for identifying component partitioning.

The controls below (if any) were marked by NIST as being related to CCI-002395.