SI-4(22)
SI-4(22): Unauthorized Network Services
- (a): Detect network services that have not been authorized or approved by [authorization or approval processes for network services are defined;] ; and
- (b): [one or more of "audit"/"alert {{ insert: param, si-04.22_odp.03 }} "] when detected.
Supplemental
Unauthorized or unapproved network services include services in service-oriented architectures that lack organizational verification or validation and may therefore be unreliable or serve as malicious rogues for valid services.
| CIA Levels | |
|---|---|
| Confidentiality | low |
| Integrity | low |
| Availability | low |
| Overlays |
|---|
| NC3 |
| CSF Categories |
|---|
| None |