SC-7(19)

Requirement

Block inbound and outbound communications traffic between [Assignment: organization-defined communication clients] that are independently configured by end users and external service providers.

Discussion

Communication clients independently configured by end users and external service providers include instant messaging clients and video conferencing software and applications. Traffic blocking does not apply to communication clients that are configured by organizations to perform authorized functions.

Title

Boundary Protection | Block Communication from Non-organizationally Configured Hosts
Family

System and Communications Protection
NIST 800-53B Baseline(s)

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing boundary protection; system design documentation; system hardware and software; system architecture; system configuration settings and associated documentation; list of communication clients independently configured by end users and external service providers; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel with boundary protection responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing the blocking of inbound and outbound communications traffic between communication clients independently configured by end users and external service providers].

ID	Assessment Objectives
SC-07(19)[01]	inbound communications traffic is blocked between <SC-07(19)_ODP communication clients> that are independently configured by end users and external service providers;
SC-07(19)[02]	outbound communications traffic is blocked between <SC-07(19)_ODP communication clients> that are independently configured by end users and external service providers.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!