CCI-002415

Employ boundary protection mechanisms to isolate organization-defined system components supporting organization-defined missions and/or business functions.

Implementation Guidance

The organization being inspected/assessed designs the information system to employ boundary protection mechanisms to separate information system components defined in SC-7 (21), CCI 2413 supporting missions and/or business functions defined in SC-7 (21), CCI 2414.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines network topology diagrams, architecture documentation, or any other documentation identifying component partitioning to ensure the organization being inspected/assessed employs boundary protection mechanisms to separate information system components defined in SC-7 (21), CCI 2413 supporting missions and/or business functions defined in SC-7 (21), CCI 2414.

Compelling Evidence

1.) Current network topology diagrams. 2.) Architecture documentation.

The controls below (if any) were marked by NIST as being related to CCI-002415.