MA-4(4)
-
Requirement
Protect nonlocal maintenance sessions by:
(a) Employing [Assignment: organization-defined authenticators that are replay resistant]; and
(b) Separating the maintenance sessions from other network sessions with the system by either:
(1) Physically separated communications paths; or
(2) Logically separated communications paths.
-
Discussion
Communications paths can be logically separated using encryption.
CMMC Training
Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!