CA-3(3)—Information System Connections
PBMM (P1)
Management
>Control Description
SYSTEM INTERCONNECTIONS | UNCLASSIFIED NON-NATIONAL SECURITY SYSTEM CONNECTIONS The organization prohibits the direct connection of an ⚙organization-defined unclassified, non-national security system to an external network without the use of [Assignment; organization-defined boundary protection device].
>Supplemental Guidance
Organizations typically do not have control over external networks (e.g., the Internet). Approved boundary protection devices (e.g., routers, firewalls) mediate communications (i.e., information flows) between unclassified non-national security systems and external networks. This control enhancement is required for organizations processing, storing, or transmitting Protected Information.
Ask AI
Configure your API key to use AI features.