Navigate

SC-7 (11)

SC-7 (11): Restrict Incoming Communications Traffic

The information system only allows incoming communications from [Assignment: organization-defined authorized sources] to be routed to [Assignment: organization-defined authorized destinations].

Supplemental

This control enhancement provides determinations that source and destination address pairs represent authorized/allowed communications. Such determinations can be based on several factors including, for example, the presence of source/destination address pairs in lists of authorized/allowed communications, the absence of address pairs in lists of unauthorized/disallowed pairs, or meeting more general rules for authorized/allowed source/destination pairs.

CIA Levels
Confidentiality	unknown
Integrity	low
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SC-7 (11).

Control	Description
AC-3	The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Enhancements

The controls below (if any) add on to the requirements of SC-7 (11).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-7 (11).

CCI	Definition
CCI-002401	The organization defines the authorized sources from which the information system will allow incoming communications.
CCI-002402	The organization defines the authorized destinations for routing inbound communications.
CCI-002403	The information system only allows incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.