The organization prohibits the direct connection of an [organization-defined unclassified, non-national security system] to an external network without the use of [Assignment; organization-defined boundary protection device].
Supplemental
Organizations typically do not have control over external networks (e.g., the Internet). Approved boundary protection devices (e.g., routers, firewalls) mediate communications (i.e., information flows) between unclassified non-national security systems and external networks. This control enhancement is required for organizations processing, storing, or transmitting Controlled Unclassified Information (CUI).