SC-7(28)

Requirement

Prohibit the direct connection of [Assignment: organization-defined system] to a public network.

Discussion

A direct connection is a dedicated physical or virtual connection between two or more systems. A public network is a network accessible to the public, including the Internet and organizational extranets with public access.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing boundary protection; system design documentation; system hardware and software; system architecture; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developer; organizational personnel with boundary protection responsibilities].

Test

[SELECT FROM: Mechanisms prohibiting the direct connection of systems to an external network].

ID	Assessment Objectives
SC-07(28)	the direct connection of the <SC-07(28)_ODP system> to a public network is prohibited.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!