SC-7(15)

Requirement

Route networked, privileged accesses through a dedicated, managed interface for purposes of access control and auditing.

Discussion

Privileged access provides greater accessibility to system functions, including security functions. Adversaries attempt to gain privileged access to systems through remote access to cause adverse mission or business impacts, such as by exfiltrating information or bringing down a critical system capability. Routing networked, privileged access requests through a dedicated, managed interface further restricts privileged access for increased access control and auditing.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing boundary protection; system design documentation; system hardware and software; system architecture; system configuration settings and associated documentation; audit logs; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developer; organizational personnel with boundary protection responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing the routing of networked, privileged access through dedicated, managed interfaces].

ID	Assessment Objectives
SC-07(15)[01]	networked, privileged accesses are routed through a dedicated, managed interface for purposes of access control;
SC-07(15)[02]	networked, privileged accesses are routed through a dedicated, managed interface for purposes of auditing.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!