SI-14(3)
SI-14(3): Non-persistent Connectivity
Establish connections to the system on demand and terminate connections after [one of "completion of a request"/"a period of non-use"].
Supplemental
Persistent connections to systems can provide advanced adversaries with paths to move laterally through systems and potentially position themselves closer to high value assets. Limiting the availability of such connections impedes the adversary’s ability to move freely through organizational systems.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | unknown |
| Availability | unknown |
| Overlays |
|---|
| DAF Baseline |
| CSF Categories |
|---|
| None |