SA-9(2)

  • Requirement

    Require providers of the following external system services to identify the functions, ports, protocols, and other services required for the use of such services: [Assignment: organization-defined external system services].

  • Discussion

    Information from external service providers regarding the specific functions, ports, protocols, and services used in the provision of such services can be useful when the need arises to understand the trade-offs involved in restricting certain functions and services or blocking certain ports and protocols.

More Info

  • Title

    External System Services | Identification of Functions, Ports, Protocols, and Services

  • Family

    System and Services Acquisition

  • Related NIST 800-53 ID

    CM-6;CM-7

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!

Learn More