MA-4(4)
-
Requirement
Protect nonlocal maintenance sessions by:
- Employing [Assignment: organization-defined authenticators that are replay resistant]; and
- Separating the maintenance sessions from other network sessions with the system by either:
- Physically separated communications paths; or
- Logically separated communications paths.
-
Discussion
Communications paths can be logically separated using encryption.
NIST 800-53A Assessment Guidance
CMMC Training
Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!