System and Communications Protection

Monitor, control, and protect communications at the external boundaries and key internal boundaries of organizational systems.

Build security into your systems from the start, not as an afterthought

Separate user functionality from system management.

Prevent unauthorized or unintended information transfer via shared resources.

Deny network communications traffic by default on external interfaces.

Deny network communications by default, allow by exception.

Prevent remote devices from simultaneously establishing non-remote connections.

Implement cryptographic mechanisms to prevent unauthorized disclosure of CUI during transmission.

Terminate network connections at end of session or after inactivity.

Establish and manage cryptographic keys.

Employ FIPS-validated cryptography for CUI.

Prohibit remote activation of collaborative computing devices.

Control and monitor the use of mobile code.

Control and monitor the use of VoIP.

Protect the authenticity of communications sessions.

Protect CUI at rest.