SC-7(4): External Telecommunications Services
Control Family:
Parent Control:
Threats Addressed:
Baselines:
- Moderate
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- SC-7(4): External Telecommunications Services
Control Statement
- Implement a managed interface for each external telecommunication service;
- Establish a traffic flow policy for each managed interface;
- Protect the confidentiality and integrity of the information being transmitted across each interface;
- Document each exception to the traffic flow policy with a supporting mission or business need and duration of that need;
- Review exceptions to the traffic flow policy [Assignment: organization-defined frequency] and remove exceptions that are no longer supported by an explicit mission or business need;
- Prevent unauthorized exchange of control plane traffic with external networks;
- Publish information to enable remote networks to detect unauthorized control plane traffic from internal networks; and
- Filter unauthorized control plane traffic from external networks.
Supplemental Guidance
External telecommunications services can provide data and/or voice communications services. Examples of control plane traffic include routing, Domain Name System (DNS), and management. Unauthorized control plane traffic can occur through a technique known as "spoofing."