CA-3(1)—Information System Connections
Management
>Control Description
SYSTEM INTERCONNECTIONS | UNCLASSIFIED NATIONAL SECURITY SYSTEM CONNECTIONS The organization prohibits the direct connection of an ⚙organization-defined unclassified, national security system to an external network without the use of ⚙organization-defined boundary protection device.
>Supplemental Guidance
Organizations typically do not have control over external networks (e.g., the Internet). Approved boundary protection devices (e.g., routers, firewalls) mediate communications (i.e., information flows) between unclassified national security systems and external networks. This control enhancement is required for organizations processing, storing, or transmitting Protected Information.
Ask AI
Configure your API key to use AI features.