SC-7(28): Connections to Public Networks

CSF v1.1 References:

Threats Addressed:


(Not part of any baseline)

Info icon.

Control is new to this version of the control set and incorporates the following item from the previous version: CA-3(4): Connections To Public Networks.

Control Statement

Prohibit the direct connection of [Assignment: organization-defined system] to a public network.

Supplemental Guidance

A direct connection is a dedicated physical or virtual connection between two or more systems. A public network is a network accessible to the public, including the Internet and organizational extranets with public access.