SC-7(22)

Requirement

Implement separate network addresses to connect to systems in different security domains.

Discussion

The decomposition of systems into subnetworks (i.e., subnets) helps to provide the appropriate level of protection for network connections to different security domains that contain information with different security categories or classification levels.

Title

Boundary Protection | Separate Subnets for Connecting to Different Security Domains
Family

System and Communications Protection
NIST 800-53B Baseline(s)

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing boundary protection; system design documentation; system hardware and software; system architecture; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developer; organizational personnel with boundary protection responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing separate network addresses/different subnets].

ID	Assessment Objectives
SC-07(22)	separate network addresses are implemented to connect to systems in different security domains.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!