SI-4(18)
-
Requirement
Analyze outbound communications traffic at external interfaces to the system and at the following interior points to detect covert exfiltration of information: [Assignment: organization-defined interior points within the system].
-
Discussion
Organization-defined interior points include subnetworks and subsystems. Covert means that can be used to exfiltrate information include steganography.
CMMC Training
Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!