CCI-002408

The organization defines the independently configured communication clients, which are configured by end users and external service providers, between which the information system will block both inbound and outbound communications traffic.

Implementation Guidance

The organization being inspected/assessed defines and documents the independently configured communication clients, which are configured by end users and external service providers, between which the information system will block both inbound and outbound communications traffic. DoD has determined the communication clients are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented communication clients to ensure the organization being inspected/assessed defines the independently configured communication clients, which are configured by end users and external service providers, between which the information system will block both inbound and outbound communications traffic. DoD has determined the communication clients are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated configured communication clients documentation. 2.) Document must describe and define site's independently configured communication clients, which must be configured by end users and external service providers, between which the information system will block both inbound and outbound communications traffic.

The controls below (if any) were marked by NIST as being related to CCI-002408.