CA-3(4): Connections To Public Networks

Control Family:

Security Assessment And Authorization

Parent Control:

CA-3: System Interconnections

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.AM-3
DE.AE-1

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: SC-7(28): Connections to Public Networks.

Control Statement

The organization prohibits the direct connection of an [Assignment: organization-defined information system] to a public network.

Supplemental Guidance

A public network is any network accessible to the general public including, for example, the Internet and organizational extranets with public access.