An error occurred:

CCIs

Number Definition Status Related
CCI-004862 Defines the events following reviewing and updating the current system and communications protection policy. Draft
CCI-004863 Review and update the current system and communications protection procedures following organization-defined events. Draft
CCI-004864 Defines the events following reviewing and updating the current system and communications protection procedures. Draft
CCI-004865 Store state information from applications and software separately. Draft
CCI-004866 Employ organization-defined controls by type of denial-of-service to achieve the denial-of-service objective. Draft
CCI-004867 Defines the controls by type of denial-of-service event by employing the controls to achieve the denial-of-service objective. Draft
CCI-004868 Connect to external networks or systems only through managed interfaces consisting of boundary protection devices arranged in accordance with an organizational privacy architecture. Draft
CCI-004869 Prevent unauthorized exchange of control plane traffic with external networks. Draft
CCI-004870 Publish information to enable remote networks to detect unauthorized control plane traffic from internal networks. Draft
CCI-004871 Filter unauthorized control plane traffic from external networks. Draft
CCI-004872 Defines the systems that will deny network communications traffic by default and allow network communications traffic by exception. Draft
CCI-004873 Defines the safeguards to prevent split tunneling for remote devices connecting to organizational systems. Draft
CCI-004874 Conduct exfiltration tests at an organization-defined frequency. Draft
CCI-004875 Defines the frequency to conduct exfiltration tests. Draft
CCI-004876 For systems that process personally identifiable information, apply organization-defined processing rules to data elements of personally identifiable information. Draft
CCI-004877 Defines processing rules to be applied to data elements of personally identifiable information. Draft
CCI-004878 For systems that process personally identifiable information, monitor for permitted processing at the external boundary of the system and at key internal boundaries within the system. Draft
CCI-004879 For systems that process personally identifiable information, document each processing exception. Draft
CCI-004880 For systems that process personally identifiable information, review and remove exceptions that are no longer supported. Draft
CCI-004881 Prohibit the direct connection of organization-defined unclassified national security system to an external network without the use of organization-defined boundary protection device. Draft
CCI-004882 Defines the unclassified national security system that is prohibited from connecting to an external network without the use of organization-defined boundary protection device. Draft
CCI-004883 Defines the boundary protection device that prohibits the direct connection of organization-defined unclassified national security system to an external system. Draft
CCI-004884 Prohibit the direct connection of a classified national security system to an external network without the use of organization-defined boundary protection device. Draft
CCI-004885 Defines the boundary protection device that prohibits the direct connection of a classified national security system to an external system. Draft
CCI-004886 Prohibit the direct connection of organization-defined unclassified non-national security system to an external network without the use of organization-defined boundary protection device. Draft
CCI-004887 Defines the unclassified non-national security system that is prohibited from connecting to an external network without the use of organization-defined boundary protection device. Draft
CCI-004888 Defines the boundary protection device that prohibits the direct connection of organization-defined unclassified non-national security system to an external system. Draft
CCI-004889 Prohibit the direct connection of organization-defined system to a public network. Draft
CCI-004890 Defines the system that prohibits the direct connection to a public network. Draft
CCI-004891 Implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions. Draft