CA-9—Internal System Connections

Authorize internal connections of ⚙organization-defined system components or classes of components to the system;

Document, for each internal connection, the interface characteristics, security and privacy requirements, and the nature of the information communicated;

Terminate internal system connections after ⚙organization-defined conditions; and

Review ⚙organization-defined frequency the continued need for each internal connection.