Navigate

CCI-002396

CCI-002396 Definition

Protect the confidentiality and integrity of the information being transmitted across each interface for each external telecommunication service.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed documents and implements mechanisms to protect the confidentiality and integrity of the information being transmitted across each interface for each external telecommunication service.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented mechanisms to ensure the organization being inspected/assessed protects the confidentiality and integrity of the information being transmitted across each interface for each external telecommunication service.

Compelling Evidence

1.) Signed and dated mechanism documentation that describes how the site protects the confidentiality and integrity of the information being transmitted across each interface for each external telecommunication service. 2.) Network diagram. 3.) Applicable firewall rule set. 4.) Applicable firewall logs.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002396.

Control	Description
SC-7(4)	The organization: (a): Implements a managed interface for each external telecommunication service; (b): Establishes a traffic flow policy for each managed interface; (c): Protects the confidentiality and integrity of the information being transmitted across each interface; (d): Documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and (e): Reviews exceptions to the traffic flow policy [organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need.

Control

Description

SC-7(4)

The organization:

(a): Implements a managed interface for each external telecommunication service;

(b): Establishes a traffic flow policy for each managed interface;

(c): Protects the confidentiality and integrity of the information being transmitted across each interface;

(d): Documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and

(e): Reviews exceptions to the traffic flow policy [organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need.