SC-7(4)
SC-7(4): External Telecommunications Services
The organization:
- (a): Implements a managed interface for each external telecommunication service;
- (b): Establishes a traffic flow policy for each managed interface;
- (c): Protects the confidentiality and integrity of the information being transmitted across each interface;
- (d): Documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and
- (e): Reviews exceptions to the traffic flow policy [organization-defined frequency] and removes exceptions that are no longer supported by an explicit mission/business need.
Supplemental
| CIA Levels | |
|---|---|
| Confidentiality | high |
| Integrity | high |
| Availability | unknown |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |