CCI-002416

The information system implements separate network addresses (i.e., different subnets) to connect to systems in different security domains.

Implementation Guidance

The organization being inspected/assessed designs the information system to implement separate network addresses (i.e., different subnets) to connect to systems in different security domains.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines network topology diagrams, architecture documentation, or any other documentation identifying component partitioning to ensure the organization being inspected/assessed implements separate network addresses (i.e., different subnets) to connect to systems in different security domains.

Compelling Evidence

1.) Current network topology diagrams. 2.) Architecture documentation.

The controls below (if any) were marked by NIST as being related to CCI-002416.