System-Communications

Separate user functionality from system management.

Prevent unauthorized or unintended information transfer via shared resources.

Deny network communications traffic by default on external interfaces.

Deny network communications by default, allow by exception.

Prevent remote devices from simultaneously establishing non-remote connections.

Terminate network connections at end of session or after inactivity.

Establish and manage cryptographic keys.

Employ FIPS-validated cryptography for CUI.

Prohibit remote activation of collaborative computing devices.

Control and monitor the use of mobile code.

Control and monitor the use of VoIP.

Protect the authenticity of communications sessions.

Protect CUI at rest.